CVE-2020-13927 Apache Airflow'S Experimental API
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.
- CVSS
- not scored
On CISA’s exploited list
Apache Airflow's Experimental API Authentication Bypass
- Added
- 2022-01-18
- Federal patch deadline
- 2022-07-18
- Ransomware use
- not known