description: A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were vulnerable to cross-site request forgery attacks.
problem types: CSRF
affected:
{
product: Apache Airflow
vendor: n/a
versions:
status: affected, version: Apache Airflow <= 1.10.2
}