Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

GHSA-86VP-X3PR-79RX Apache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944

🗓️ 20 Apr 2021 16:40:14Reported by GoogleType 
osv
 osv🔗 osv.dev👁 42 Views

Apache Airflow XSS vulnerability in 'trigger' endpoin

Related
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2020-17515
11 Dec 202016:35
–circl
CNNVD		Apache Airflow 跨站脚本漏洞
11 Dec 202000:00
–cnnvd
CNVD		Apache Airflow Cross-Site Scripting Vulnerability (CNVD-2021-11845)
15 Dec 202000:00
–cnvd
CVE		CVE-2020-17515
11 Dec 202013:40
–cve
Cvelist		CVE-2020-17515
11 Dec 202013:40
–cvelist
EUVD		EUVD-2020-0040
7 Oct 202500:30
–euvd
Fortinet		Multiple vulnerabilities in Apache Airflow
7 Jun 202200:00
–fortinet
Github Security Blog		Apache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944
20 Apr 202116:40
–github
NVD		CVE-2020-17515
11 Dec 202014:15
–nvd
OSV		BIT-AIRFLOW-2020-17515
6 Mar 202411:00
–osv
Rows per page
SourceLink
nvdwww.nvd.nist.gov/vuln/detail/CVE-2020-17515
githubwww.github.com/apache/airflow/pull/14738
githubwww.github.com/apache/airflow/commit/13336272e32872247fa7d17e964ccd88ec8d1376
githubwww.github.com/apache/airflow/commit/409c249121bd9c8902fc2ba551b21873ab41f953
githubwww.github.com/apache/airflow/commit/7486153f451e4d2bb1c6fd9cbb5a63430157c99c
githubwww.github.com/apache/airflow/commit/ab8c55878e3e4257d2276226cb17b047ba856686
githubwww.github.com/apache/airflow/commit/c6369beed53d41c0a70415b0d958bf0604124ad7
pypiwww.pypi.org/project/apache-airflow
listswww.lists.apache.org/thread.html/rc005f4de9d9b0ba943ceb8ff5a21a5c6ff8a9df52632476698d99432@%3Cannounce.apache.org%3E
listswww.lists.apache.org/thread.html/ra8ce70088ba291f358e077cafdb14d174b7a1ce9a9d86d1b332d6367@%3Cusers.airflow.apache.org%3E
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
11 Sep 2024 17:21Current
6Medium risk
Vulners AI Score6
CVSS 3.16.1
EPSS0.16028
apache airflowcross-site scriptingendpointvulnerabilitycve-2020-13944incomplete fix
42