Skip to content

Known vulnerabilities in n/a Apache Airflow

Is your version affected?

CVE Summary Score Published
CVE-2020-13927 Exploited Apache Airflow's Experimental API Authentication Bypass 9.8 Critical Nov 10, 2020
CVE-2020-13944 In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to… Not rated Sep 17, 2020
CVE-2019-12417 A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary… Not rated Oct 30, 2019
CVE-2019-0216 A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary… Not rated Apr 10, 2019
CVE-2019-0229 A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were… Not rated Apr 10, 2019

Other n/a products