Airflow's Experimental API · Sandworm Watch

Jan 18, 2022high

CVE-2020-13927: Apache Airflow's Experimental API Authentication Bypass

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication. Required action: Apply updates per vendor instructions.

CVE-2020-13927EPSS 99.7%Airflow's Experimental APIApache

CISA KEV ↗ · unattributed attribution