CVE-2022-40127

취약점 설명

실습

환경 설정

curl -LfO 'https://airflow.apache.org/docs/apache-airflow/2.3.4/docker-compose.yaml'
 
mkdir -p ./dags ./logs ./plugins
echo -e "AIRFLOW_UID=$(id -u)" > .env
 
docker compose up airflow-init
docker compose up -d

pip3 install "apache-airflow==2.3.4" \ 
 --constraint "https://raw.githubusercontent.com/apache/airflow/constraints-2.3.4/constraints-3.7,txt"
 
airflow standalone