2024-04-04 08:46:00 +00:00

24 lines
943 B
JSON

{
"id": "CVE-2024-28423",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-14T19:15:50.877",
"lastModified": "2024-03-14T20:11:36.180",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "Airflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the unsafe_load function at cli.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted YML file."
},
{
"lang": "es",
"value": "Se descubri\u00f3 que Airflow-Diagrams v2.1.0 conten\u00eda una vulnerabilidad de carga de archivos arbitraria en la funci\u00f3n unsafe_load en cli.py. Esta vulnerabilidad permite a los atacantes ejecutar c\u00f3digo arbitrario cargando un archivo YML manipulado."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/bayuncao/vul-cve-15",
"source": "cve@mitre.org"
}
]
}