Share:

CVE-2020-17513

Moderate 5.3

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.

Published December 14, 2020.

Affected software

Get alerts for Apache Airflow

Reference links

https://lists.apache.org/thread.html/rb3647269f07cc2775ca6568cbfd4994d862c842a58120d2aba9c658a%40%3Cusers.airflow.apache.org%3E