CVE-2020-17515

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit

published December 11, 2020

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16214 · 96.9th percentile
Published
2020-12-11T13:40Z
EPSS history
Timeline
  • 11 DEC 13:40Z
    The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit
    cvelistv5