All CVE records
CVE-2020-13927 — Apache Airflow's Experimental API Authentication Bypass
CISA KEV listed
Added January 18, 2022 Remediate by July 18, 2022
Description
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.
Required action
Apply updates per vendor instructions.
Notes
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.