What is the impact of this vuln #1477

Closed Answered by ehsandeep

SAGEof6iixPATHS asked this question in Q&A

SAGEof6iixPATHS
May 16, 2021

Hello!

What is the impact of this vulnerability?
misconfiguration/airflow-api-exposure.yaml

Any reports or write-ups?

Answered by ehsandeep

https://nvd.nist.gov/vuln/detail/CVE-2020-13927

View full answer

Replies: 1 comment 2 replies

ehsandeep
May 16, 2021
Maintainer

https://nvd.nist.gov/vuln/detail/CVE-2020-13927

2 replies

toufik-airane Jul 30, 2021
Maintainer

The template misconfiguration/airflow-api-exposure.yaml becomes CVE-2020-13927.

According to NIST, It's a critical issue.
https://nvd.nist.gov/vuln/detail/CVE-2020-13927

Exploit: https://packetstormsecurity.com/files/162908/Apache-Airflow-1.10.10-Remote-Code-Execution.html

ehsandeep Jul 30, 2021
Maintainer

The linked exploit is for CVE-2020-11978, and we have a template for that as well.

Answer selected by toufik-airane

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment