CVE-2020-17513CWE-918

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack

published December 14, 2020

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04377 · 91.2th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2020-12-14T09:40Z
EPSS history
Timeline
  • 14 DEC 09:40Z
    In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack
    cvelistv5