CVE-2020-13944

creationtimestamp| type| source ---|---|--- 2020-12-11 16:35:40+00:00| seen| https://t.me/cibsecurity/20105 2020-12-11 17:25:38+00:00| seen| https://t.me/cibsecurity/20125 2020-12-11 18:05:10+00:00| seen| https://t.me/cibsecurity/20143 2020-12-11 18:11:18+00:00| seen| https://t.me/cibsecurity/201...

PYSEC-2020-21

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely...