{"metadata": {"vulnerability": "CVE-2020-13944", "count": 35, "kinds": {"milestone": 7, "sighting": 11, "kev": 0, "other": 17}}, "data": [{"timestamp": "2020-06-08T00:00:00Z", "date_only": false, "value": "2020-06-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-13944", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-09-17T00:00:00Z", "date_only": true, "value": "2020-09-17", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-13944", "record": "GSD-2020-13944", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2020-09-17T14:01:40Z", "date_only": false, "value": "2020-09-17T14:01:40.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-13944", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-09-17T14:15:00Z", "date_only": false, "value": "2020-09-17T14:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4PWQ-FJ89-6RJC", "record": "GHSA-4PWQ-FJ89-6RJC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-09-17T14:15:00Z", "date_only": false, "value": "2020-09-17T14:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2020-19", "record": "PYSEC-2020-19", "field": "published"}, {"timestamp": "2020-09-17T14:15:00Z", "date_only": false, "value": "2020-09-17T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-13944", "record": "GSD-2020-13944", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-09-17T14:15:12.810Z", "date_only": false, "value": "2020-09-17T14:15:12.810", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-13944", "record": "FKIE_CVE-2020-13944", "field": "published"}, {"timestamp": "2020-09-18T00:00:00Z", "date_only": true, "value": "2020-09-18", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-52628", "record": "CNVD-2020-52628", "field": "openTime"}, {"timestamp": "2020-09-18T00:00:00Z", "date_only": true, "value": "2020-09-18", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-52628", "record": "CNVD-2020-52628", "field": "submitTime"}, {"timestamp": "2020-12-11T16:35:40Z", "date_only": false, "value": "2020-12-11T16:35:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20105", "record": "CVE-2020-13944", "field": "creation_timestamp", "uuid": "ef3cec48-98bc-4136-ad23-b89afd86d49b", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20105"}, {"timestamp": "2020-12-11T17:25:38Z", "date_only": false, "value": "2020-12-11T17:25:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20125", "record": "CVE-2020-13944", "field": "creation_timestamp", "uuid": "ba9672e0-0c87-4aac-80b5-9b12179c9888", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20125"}, {"timestamp": "2020-12-11T18:05:10Z", "date_only": false, "value": "2020-12-11T18:05:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20143", "record": "CVE-2020-13944", "field": "creation_timestamp", "uuid": "a17e6cef-2ace-4882-8218-0571cbc4fbb2", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20143"}, {"timestamp": "2020-12-11T18:11:18Z", "date_only": false, "value": "2020-12-11T18:11:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20163", "record": "CVE-2020-13944", "field": "creation_timestamp", "uuid": "dd0ccb29-8f42-4506-aaeb-ffcc6a43c66e", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20163"}, {"timestamp": "2020-12-11T18:24:29Z", "date_only": false, "value": "2020-12-11T18:24:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20181", "record": "CVE-2020-13944", "field": "creation_timestamp", "uuid": "bf66f654-3820-42d3-a953-6dcabccdcbb0", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20181"}, {"timestamp": "2020-12-11T18:25:24Z", "date_only": false, "value": "2020-12-11T18:25:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20201", "record": "CVE-2020-13944", "field": "creation_timestamp", "uuid": "3345236c-9eb2-4b07-861c-b06c80f29ad6", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20201"}, {"timestamp": "2020-12-11T18:31:32Z", "date_only": false, "value": "2020-12-11T18:31:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20221", "record": "CVE-2020-13944", "field": "creation_timestamp", "uuid": "a77d5704-946d-43f3-8f45-80c64d297098", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20221"}, {"timestamp": "2020-12-11T18:34:31Z", "date_only": false, "value": "2020-12-11T18:34:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20240", "record": "CVE-2020-13944", "field": "creation_timestamp", "uuid": "f753c8e4-180a-44ee-a166-b382d1f5d460", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20240"}, {"timestamp": "2020-12-11T18:37:19Z", "date_only": false, "value": "2020-12-11T18:37:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20248", "record": "CVE-2020-13944", "field": "creation_timestamp", "uuid": "2935823b-7ddd-495a-93b9-c4f2ce93a1f5", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20248"}, {"timestamp": "2020-12-11T19:25:10Z", "date_only": false, "value": "2020-12-11T19:25:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20268", "record": "CVE-2020-13944", "field": "creation_timestamp", "uuid": "fa4ead39-75b1-4287-b9b5-c2f01af599d6", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20268"}, {"timestamp": "2020-12-11T19:34:19Z", "date_only": false, "value": "2020-12-11T19:34:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20287", "record": "CVE-2020-13944", "field": "creation_timestamp", "uuid": "47907f3b-0a58-402b-ae3f-7ffc753b0e38", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20287"}, {"timestamp": "2021-05-03T23:06:24Z", "date_only": false, "value": "2021-05-03T23:06:24.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2020-13944", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-05-04T00:00:00Z", "date_only": true, "value": "2021-05-04", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-13944", "record": "GSD-2020-13944", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-05-04T00:15:00Z", "date_only": false, "value": "2021-05-04T00:15:00Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2020-19", "record": "PYSEC-2020-19", "field": "modified"}, {"timestamp": "2021-06-18T18:29:54Z", "date_only": false, "value": "2021-06-18T18:29:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4PWQ-FJ89-6RJC", "record": "GHSA-4PWQ-FJ89-6RJC", "field": "published"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-525", "record": "CERTFR-2022-AVI-525", "field": "last_revision_date"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-525", "record": "CERTFR-2022-AVI-525", "field": "initial_release_date"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-525", "record": "CERTFR-2022-AVI-525", "field": "revisions.0.revision_date"}, {"timestamp": "2022-08-06T03:46:00Z", "date_only": false, "value": "2022-08-06T03:46Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-13944", "record": "GSD-2020-13944", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:21:47.390Z", "date_only": false, "value": "2023-12-13T01:21:47.390055Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-13944", "record": "GSD-2020-13944", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T11:00:45.413Z", "date_only": false, "value": "2024-03-06T11:00:45.413Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2020-13944", "record": "BIT-AIRFLOW-2020-13944", "field": "published"}, {"timestamp": "2024-08-04T12:32:14.289Z", "date_only": false, "value": "2024-08-04T12:32:14.289Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-13944", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T12:32:14.289Z", "date_only": false, "value": "2024-08-04T12:32:14.289Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-13944", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-11T20:04:09Z", "date_only": false, "value": "2024-09-11T20:04:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4PWQ-FJ89-6RJC", "record": "GHSA-4PWQ-FJ89-6RJC", "field": "modified"}, {"timestamp": "2026-06-17T02:53:57.190Z", "date_only": false, "value": "2026-06-17T02:53:57.190", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-13944", "record": "FKIE_CVE-2020-13944", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2020-13944", "record": "BIT-AIRFLOW-2020-13944", "field": "modified"}]}