daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2020-13927.yaml

patch-1
Prince Chaddha 2022-05-17 12:04:21 +05:30 committed by GitHub
parent 79628a3708
commit 5839c2c35f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
cves/2020/CVE-2020-13927.yaml
View File

@ -4,8 +4,10 @@ info:
name: Airflow Experimental <1.10.11 - REST API Auth Bypass name: Airflow Experimental <1.10.11 - REST API Auth Bypass
author: pdteam author: pdteam
severity: critical severity: critical
description: Airflow's Experimental API prior 1.10.11 allows all API requests without authentication. description: |
remediation: From Airflow 1.10.11 forward, the default has been changed to deny all requests by default. Note - this change fixes it for new installs but existing users need to change their config to default `[api]auth_backend = airflow.api.auth.backend.deny_all` as mentioned in the Updating Guide linked in the references. Airflow's Experimental API prior 1.10.11 allows all API requests without authentication.
remediation: |
From Airflow 1.10.11 forward, the default has been changed to deny all requests by default. Note - this change fixes it for new installs but existing users need to change their config to default `[api]auth_backend = airflow.api.auth.backend.deny_all` as mentioned in the Updating Guide linked in the references.
reference: reference:
- https://lists.apache.org/thread.html/r23a81b247aa346ff193670be565b2b8ea4b17ddbc7a35fc099c1aadd%40%3Cdev.airflow.apache.org%3E - https://lists.apache.org/thread.html/r23a81b247aa346ff193670be565b2b8ea4b17ddbc7a35fc099c1aadd%40%3Cdev.airflow.apache.org%3E
- http://packetstormsecurity.com/files/162908/Apache-Airflow-1.10.10-Remote-Code-Execution.html - http://packetstormsecurity.com/files/162908/Apache-Airflow-1.10.10-Remote-Code-Execution.html
@ -18,7 +20,7 @@ info:
metadata: metadata:
verified: true verified: true
shodan-query: title:"Airflow - DAGs" || http.html:"Apache Airflow" shodan-query: title:"Airflow - DAGs" || http.html:"Apache Airflow"
tags: cve,cve2020,apache,airflow,unauth tags: cve,cve2020,apache,airflow,unauth,auth-bypass
requests: requests:
- method: GET - method: GET
@ -27,6 +29,7 @@ requests:
matchers: matchers:
- type: word - type: word
part: body
words: words:
- '"dag_run_url":' - '"dag_run_url":'
- '"dag_id":' - '"dag_id":'