id: airflow-exposure

info:
  name: Apache Airflow Exposure / Unauthenticated Access
  author: pdteam
  severity: medium
  tags: panel

requests:
  - method: GET
    path:
      - '{{BaseURL}}'
      - '{{BaseURL}}/admin/'
    matchers:
      - type: word
        words:
          - '<title>Airflow - DAGs</title>'
          - '<a href="https://github.com/apache/airflow">'
        condition: and