Skip to contentApache Airflow vulnerabilities
- apache airflowSSRF vulnerability in Apache AirflowCVE-2020-17513Fix available5.3 Medium
- apache airflowApache Airflow logs passwords in plaintextCVE-2020-17511Fix available6.5 Medium
- apache airflowApache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944CVE-2020-17515Fix availableEPSS 16.2%6.1 Medium
- apache airflow, airflow's experimental api +1 moreAuthentication bypass in Apache AirflowCVE-2020-13927In KEVPublic exploitFix availableEPSS 99.8%9.8 Critical
- apache airflowApache Airflow Cross-site ScriptingCVE-2020-13944Fix availableEPSS 25.1%6.1 Medium
- apache airflowStored XSS in Apache AirflowCVE-2020-9485Fix available6.1 Medium
- apache airflowMultiple stored XSS in RBAC Admin screens in Apache AirflowCVE-2020-11983Fix available5.4 Medium
- apache airflowInsecure default config of Celery worker in Apache AirflowCVE-2020-11982Fix available9.8 Critical
- apache airflowCommand injection via Celery broker in Apache AirflowCVE-2020-11981Public exploitFix availableEPSS 36.8%9.8 Critical
- apache airflowRemote code execution (RCE) in Apache AirflowCVE-2020-11978In KEVPublic exploitFix availableEPSS 99.2%8.8 High
- apache airflowXSS in Apache AirflowCVE-2019-12398Fix available4.8 Medium
- apache airflowApache Airflow vulnerable to XSS and local file disclosureCVE-2019-12417Fix available4.8 Medium
- apache airflowApache Airflow vulnerable to Stored XSSCVE-2019-0216Fix available4.8 Medium
- apache airflowApache Airflow vulnerable to CSRF AttacksCVE-2019-0229Fix available8.8 High
- apache airflowApache Airflow vulnerable to Stored XSSCVE-2018-20244Fix available5.5 Medium
- apache airflowImproper Certificate Validation in Apache AirflowCVE-2018-20245Fix available7.5 High
- apache airflowApache Airflow vulnerable to XSSCVE-2017-17836Fix available9.8 Critical
- apache airflowCross-Site Request Forgery (CSRF) in Apache AirflowCVE-2017-17835Fix available8.8 High
- apache airflowImproper Input Validation in Apache Airflow resulting in Remote Code ExecutionCVE-2017-15720Fix available8.8 High
- apache airflowApache Airflow Reflected Cross-site Scripting vulnerability in 404 EndpointCVE-2017-12614Fix available6.1 Medium