CVE-2020-17513

published 2020-12-14

CVE-2020-17513: In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C N I L A N

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	airflow	< 1.10.13	1.10.13
apache_software_foundation	apache_airflow	>= Apache Airflow < 1.10.13	1.10.13

CWE-918