¡¾·ì϶¹«¸æ¡¿Apache AirflowÊ¢¿ª³Á¶¨Ïò·ì϶£¨CVE-2022-40754£©

°ä²¼¹¦·ò 2022-09-21


0x00 ·ì϶¸ÅÊö

CVE   ID

CVE-2022-40754

·¢ÏÖ¹¦·ò

2022-09-21

Àà    ÐÍ

Ê¢¿ª³Á¶¨Ïò

µÈ    ¼¶

¸ßΣ

Ô¶³ÌÀûÓÃ

ÊÇ

Ó°ÏìÁìÓò


¹¥»÷¸´ÔÓ¶È


Óû§½»»¥


PoC/EXP


ÔÚÒ°ÀûÓÃ


 

0x01 ·ì϶ÏêÇé

Apache Airflow ÊÇÒ»¸ö¿ÉÄÜ¿ª·¢¡¢µ÷¶ÈºÍ¼à¿Ø¹¤×÷Á÷µÄ±àÅÅÆ½Ì¨¡£¡£ ¡£¡£¡£¡£¡£¡£

9ÔÂ20ÈÕ £¬£¬ £¬£¬£¬ £¬£¬Apache °ä²¼°²È«²¼¸æ £¬£¬ £¬£¬£¬ £¬£¬½¨¸´ÁËApache AirflowÖеÄÒ»¸öÊ¢¿ª³Á¶¨Ïò·ì϶£¨CVE-2022-40754£© £¬£¬ £¬£¬£¬ £¬£¬¸Ã·ì϶´æÔÚÓÚÔÚwebserverµÄ¡®/confirm¡¯¶ËµãÖÐ £¬£¬ £¬£¬£¬ £¬£¬Ó°ÏìÁËApache Airflow °æ±¾2.3.0 µ½ 2.3.4¡£¡£ ¡£¡£¡£¡£¡£¡£

´Ë±í £¬£¬ £¬£¬£¬ £¬£¬Apache»¹½¨¸´ÁËApache AirflowÖеÄÒ»¸ö±ðʽ»¯×Ö·û´®·ì϶£¨CVE-2022-40604£© £¬£¬ £¬£¬£¬ £¬£¬ÓÉÓÚApache AirflowÖÐurlµÄÒ»²¿Ãű»²»Óø¹µØÌåʽ»¯ £¬£¬ £¬£¬£¬ £¬£¬¿ÉÄܻᵼÖÂÐÅÏ¢ÌáÈ¡¡£¡£ ¡£¡£¡£¡£¡£¡£

 

Ó°ÏìÁìÓò

Apache Airflow°æ±¾ 2.3.0 - 2.3.4

 

0x02 °²È«½¨Òé

ĿǰÉÏÊö·ì϶ÒѾ­½¨¸´ £¬£¬ £¬£¬£¬ £¬£¬ÊÜÓ°ÏìÓû§¿ÉÉý¼¶µ½£º

Apache Airflow°æ±¾ >= 2.4.0

ÏÂÔØÁ´½Ó£º

https://github.com/apache/airflow/releases

 

0x03 ²Î¿¼Á´½Ó

https://www.mail-archive.com/announce@apache.org/msg07595.html

https://www.mail-archive.com/announce@apache.org/msg07594.html

https://github.com/apache/airflow/pull/26409

 

0x04 °æ±¾ÐÅÏ¢

°æ±¾

ÈÕÆÚ

Åú¸ÄÄÚÈÝ

V1.0

2022-09-21

³õ´Î°ä²¼

 

0x05 ¸½Â¼

8827Ì«Ñô¼¯Íżò½é

8827Ì«Ñô¼¯ÍųÉÁ¢ÓÚ1996Äê £¬£¬ £¬£¬£¬ £¬£¬ÊÇÓÉÁôÃÀ²©Ê¿ÑÏÍû¼ÑŮʿ´´½¨µÄ¡¢Õ¼ÓÐÆëÈ«×ÔÖ÷֪ʶ²úȨµÄÐÅÏ¢°²È«¸ß¿Æ¼¼ÆóÒµ¡£¡£ ¡£¡£¡£¡£¡£¡£ÊǹúÄÚ×î¾ßʵÁ¦µÄÐÅÏ¢°²È«²úÆ·¡¢°²È«·þÎñ½â¾ö¹æ»®µÄÁ캽ÆóÒµÖ®Ò»¡£¡£ ¡£¡£¡£¡£¡£¡£

¹«Ë¾×ܲ¿Î»ÓÚ±±¾©ÊÐÖйشåÈí¼þÔ°8827Ì«Ñô¼¯ÍÅ´óÏà £¬£¬ £¬£¬£¬ £¬£¬¹«Ë¾Ô±¹¤½ü4000ÈË £¬£¬ £¬£¬£¬ £¬£¬Ñз¢ÍŶÓ1200ÓàÈË, ¼¼Êõ·þÎñÍŶÓ1300ÓàÈË¡£¡£ ¡£¡£¡£¡£¡£¡£ÔÚÈ«¹ú¸÷Ê¡¡¢ÊÓ×¢×ÔÖÎÇøÉèÁ¢·ÖÖ§»ú¹¹ÁùÊ®¶à¸ö £¬£¬ £¬£¬£¬ £¬£¬Õ¼Óи²¸ÇÈ«¹úµÄÏúÊÛϵͳ¡¢Çþ·ϵͳºÍ¼¼ÊõÖ§³Öϵͳ¡£¡£ ¡£¡£¡£¡£¡£¡£¹«Ë¾ÓÚ2010Äê6ÔÂ23ÈÕÔÚÀö½­ÖÐÓ×°å¹ÒÅÆÉÏÊÓ×£¡£ ¡£¡£¡£¡£¡£¡££¨¹ÉƱ´úÂ룺002439£©

¶àÄêÀ´ £¬£¬ £¬£¬£¬ £¬£¬8827Ì«Ñô¼¯ÍÅÖÂÁ¦ÓÚÌṩӵÓйú¼Ê¾ºÕùÁ¦µÄ×ÔÖ÷´´Ðµİ²È«²úÆ·ºÍ×î¼Ñʵ¼Ê·þÎñ £¬£¬ £¬£¬£¬ £¬£¬Ô®ÊÖ¿Í»§È«ÃæÌáÉýÆäIT»ù´¡ÉèÊ©µÄ°²È«ÐԺͳö²úЧÁ¦ £¬£¬ £¬£¬£¬ £¬£¬Îª´òÔìºÍÌáÉý¹ú¼Ê»¯µÄÃñ×åÐÅÏ¢°²È«²úÒµÁì¾üÆ·ÅÆ¶ø²»Ð¸ÖÂÁ¦¡£¡£ ¡£¡£¡£¡£¡£¡£

 

¹ØÓÚ8827Ì«Ñô¼¯ÍÅ

8827Ì«Ñô¼¯ÍŰ²È«Ó¦¼±ÏìÓ¦ÖÐÐÄÖØÒªÕë¶Ô³ÁÒª°²È«·ì϶µÄÔ¤¾¯¡¢¸ú×ٺͷÖÏíÈ«Çò×îеÄÍþвµý±¨ºÍ°²È«»ã±¨¡£¡£ ¡£¡£¡£¡£¡£¡£

¹Ø×¢ÒÔϹ«¼ÒºÅ £¬£¬ £¬£¬£¬ £¬£¬»ñȡȫÇò×îа²È«×ÊѶ£º

image.png