id: airflow-configuration-exposure
info:
name: Apache Airflow Configuration Exposure
author: pd-team
severity: medium
requests:
- method: GET
path:
- '{{BaseURL}}/airflow.cfg'
matchers:
- type: word
words:
- '[core]'
- '[api]'
condition: and