description: In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.
problem types: CWE-918 Server-Side Request Forgery (SSRF)
affected:
{
product: Apache Airflow
vendor: Apache Software Foundation
versions:
lessThan: 1.10.13, status: affected, version: Apache Airflow, versionType: custom
}