CVE-2022-46421

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

Vendor	Product	Versions
Apache Software Foundation	Apache Airflow Hive Provider	< 5.0.0

References

https://github.com/apache/airflow/pull/28101Patch, Third Party Advisory
https://lists.apache.org/thread/09twdoyoybldlfj5gvk0qswtofh0rmp4Mailing List, Patch, Vendor Advisory
https://github.com/apache/airflow/pull/28101Patch, Third Party Advisory
https://lists.apache.org/thread/09twdoyoybldlfj5gvk0qswtofh0rmp4Mailing List, Patch, Vendor Advisory

Timeline

Published: Dec 20, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-464224.8An issue in Netgear WNR2000 v1 1.2.3.7 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading a crafted CVE-2022-464238.1An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a MITM (Man-in-th CVE-2022-464248.1An exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can co CVE-2022-464284.8TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via u CVE-2022-46439.8A vulnerability was found in docconv up to 1.2.0. It has been declared as critical. This vulnerability affects the function ConvertPDFImages CVE-2022-464304.8TP-Link TL-WR740N V1 and V2 v3.12.4 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) CVE-2022-464327.5An exploitable firmware modification vulnerability was discovered on TP-Link TL-WR743ND V1. An attacker can conduct a MITM (Man-in-the-Middl CVE-2022-464347.5An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitrary code or cause a D CVE-2022-464358.8An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows attackers to execute CVE-2022-464385.4A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute CVE-2022-46446.1Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.CVE-2022-464405.5ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c.