What is the impact of this vuln

[SAGEof6iixPATHS]

Hello!

What is the impact of this vulnerability?
misconfiguration/airflow-api-exposure.yaml

Any reports or write-ups?

[ehsandeep]

https://nvd.nist.gov/vuln/detail/CVE-2020-13927

[toufik-airane]

The template misconfiguration/airflow-api-exposure.yaml becomes CVE-2020-13927.

According to NIST, It's a critical issue.
https://nvd.nist.gov/vuln/detail/CVE-2020-13927

Exploit: https://packetstormsecurity.com/files/162908/Apache-Airflow-1.10.10-Remote-Code-Execution.html

[ehsandeep]

The linked exploit is for CVE-2020-11978, and we have a template for that as well.