Description
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| airflow | apache / airflow | >= 0, < 1.10.11 | affected |
| Apache Airflow | n/a / Apache Airflow | Apache Airflow <1.10.11 | affected |