writeups.xyz / A misconfigured Apache Airflow to AWS Account Compromise

Submitter : c2a

Date: 2 February 2022

Bounty : undisclosed

Vulnerabilities :

• Outdated Component With a Known Vulnerability
• Privilege Escalation
• Information Disclosure

Programs :

• Undisclosed

Authors :

• Avinash Jain (@Logicbomb_1)

Link :
https://logicbomb.medium.com/a-misconfigured-apache-airflow-to-aws-account-compromise-c905dc49998d