PULSE
ESEN
FEED
ransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Servicesransomsilentransomgroup reclama a W... R...ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Servicesransomsilentransomgroup reclama a W... R...ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technology
← Todos os CVEs
CVE Watch—

CVE-2020-13927

Apache Airflow's Experimental API Authentication Bypass

CVSS

—

Sem CVSS

EPSS

99.8%

p100

KEV

SIM

18 de jan. de 2022

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
99.8%EPSS · 30 dias99.8%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Apache / Airflow's Experimental API

Vulnerabilidade

Apache Airflow's Experimental API Authentication Bypass

Adicionado ao KEV

18 de jan. de 2022

Corrigir até

18 de jul. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2020-13927

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.