- Vendor / Project
- Apache
- Product
- Airflow's Experimental API
- Date added
- Jan 18, 2022
- Due date
- Jul 18, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-1188, CWE-306
Description
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.
Required action
Apply updates per vendor instructions.