Site icon API Security Blog

Missing Authentication

apache_airflow is vulnerable to Missing Authentication. The vulnerability due to lack of authentication enforcement on the lineage endpoint of the deprecated Experimental API, allows unauthenticated users to access the endpoint, potentially exposing metadata about a Directed Acyclic Graph (DAG) and its…Read More

Exit mobile version