Update CVE-2020-13927.yaml

cves/2020/CVE-2020-13927.yaml

@@ -4,8 +4,10 @@ info:
   name: Airflow Experimental <1.10.11 - REST API Auth Bypass
   author: pdteam
   severity: critical
-  description: Airflow's Experimental API prior 1.10.11 allows all API requests without authentication.
-  remediation: From Airflow 1.10.11 forward, the default has been changed to deny all requests by default.  Note - this change fixes it for new installs but existing users need to change their config to default `[api]auth_backend = airflow.api.auth.backend.deny_all` as mentioned in the Updating Guide linked in the references.
+  description: |
+    Airflow's Experimental API prior 1.10.11 allows all API requests without authentication.
+  remediation: |
+    From Airflow 1.10.11 forward, the default has been changed to deny all requests by default.  Note - this change fixes it for new installs but existing users need to change their config to default `[api]auth_backend = airflow.api.auth.backend.deny_all` as mentioned in the Updating Guide linked in the references.
   reference:
     - https://lists.apache.org/thread.html/r23a81b247aa346ff193670be565b2b8ea4b17ddbc7a35fc099c1aadd%40%3Cdev.airflow.apache.org%3E
     - http://packetstormsecurity.com/files/162908/Apache-Airflow-1.10.10-Remote-Code-Execution.html
@@ -18,7 +20,7 @@ info:
   metadata:
     verified: true
     shodan-query: title:"Airflow - DAGs" || http.html:"Apache Airflow"
-  tags: cve,cve2020,apache,airflow,unauth
+  tags: cve,cve2020,apache,airflow,unauth,auth-bypass
 
 requests:
   - method: GET
@@ -27,6 +29,7 @@ requests:
 
     matchers:
       - type: word
+        part: body
         words:
           - '"dag_run_url":'
           - '"dag_id":'