{"metadata": {"vulnerability": "cve-2020-13927", "count": 57, "kinds": {"milestone": 8, "sighting": 15, "kev": 11, "other": 23}}, "data": [{"timestamp": "2020-06-08T00:00:00Z", "date_only": false, "value": "2020-06-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-13927", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-11-10T00:00:00Z", "date_only": false, "value": "2020-11-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-13927", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-11-10T16:15:00Z", "date_only": false, "value": "2020-11-10T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HHX9-P69V-CX2J", "record": "GHSA-HHX9-P69V-CX2J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-11-10T16:15:00Z", "date_only": false, "value": "2020-11-10T16:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2020-18", "record": "PYSEC-2020-18", "field": "published"}, {"timestamp": "2020-11-10T16:15:11.807Z", "date_only": false, "value": "2020-11-10T16:15:11.807", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-13927", "record": "FKIE_CVE-2020-13927", "field": "published"}, {"timestamp": "2020-11-10T16:15:11.807Z", "date_only": false, "value": "2020-11-10T16:15:11.807", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2020-13927", "record": "GSD-2020-13927", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2020-11-10T18:27:36Z", "date_only": false, "value": "2020-11-10T18:27:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/16094", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "686a4b44-eacd-41c4-b351-1d75a6138b0d", "content": "\u203c CVE-2020-13927 \u203c\n\nThe previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and is documented at https://airflow.apache.org/docs/1.10.11/security.html#api-authentication. Note this change fixes it for new installs but existing users need to change their config to default `[api]auth_backend = airflow.api.auth.backend.deny_all` as mentioned in the Updating Guide: https://github.com/apache/airflow/blob/1.10.11/UPDATING.md#experimental-api-will-deny-all-request-by-default\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/16094"}, {"timestamp": "2020-11-12T00:00:00Z", "date_only": true, "value": "2020-11-12", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-66861", "record": "CNVD-2020-66861", "field": "submitTime"}, {"timestamp": "2020-11-24T17:29:00Z", "date_only": false, "value": "2020-11-24T17:29:00Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2020-18", "record": "PYSEC-2020-18", "field": "modified"}, {"timestamp": "2020-11-26T00:00:00Z", "date_only": true, "value": "2020-11-26", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-66861", "record": "CNVD-2020-66861", "field": "openTime"}, {"timestamp": "2021-04-30T00:00:00Z", "date_only": true, "value": "2021-04-30", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-13927", "record": "GSD-2020-13927", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-04-30T17:34:13Z", "date_only": false, "value": "2021-04-30T17:34:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HHX9-P69V-CX2J", "record": "GHSA-HHX9-P69V-CX2J", "field": "published"}, {"timestamp": "2021-06-03T00:00:00Z", "date_only": true, "value": "2021-06-03", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-13927", "record": "GSD-2020-13927", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-06-03T00:39:25Z", "date_only": false, "value": "2021-06-03T00:39:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/579", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "ab22d894-18a0-456a-b509-da53678bc845", "content": "CVE-2020-13927 CVE-2020-11978 Apache Airflow 1.10.10 - 'Example Dag'\u9060\u7a0b\u547d\u4ee4\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-13927_CVE-2020-11978_Apache_Airflow_1.10.10_-_%27Example_Dag%27%E9%81%A0%E7%A8%8B%E5%91%BD%E4%BB%A4%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/579"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-13927", "field": "timestamps.asserted_at", "uuid": "4f3594a1-de25-4c96-a4d8-00f0e8567a7f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-13927", "field": "timestamps.asserted_at", "uuid": "ab1cda62-561f-4511-a027-281cf646b789", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-13927", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2020-13927", "record": "GSD-2020-13927", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-13927", "field": "evidence.0.details.added_date", "uuid": "ab1cda62-561f-4511-a027-281cf646b789", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-13927", "field": "evidence.0.details.date_added", "uuid": "4f3594a1-de25-4c96-a4d8-00f0e8567a7f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-13927", "field": "timestamps.first_seen_at", "uuid": "4f3594a1-de25-4c96-a4d8-00f0e8567a7f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-13927", "field": "timestamps.first_seen_at", "uuid": "ab1cda62-561f-4511-a027-281cf646b789", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-13927", "field": "status.status_updated_at", "uuid": "4f3594a1-de25-4c96-a4d8-00f0e8567a7f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-13927", "field": "status.status_updated_at", "uuid": "ab1cda62-561f-4511-a027-281cf646b789", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-13927", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-525", "record": "CERTFR-2022-AVI-525", "field": "last_revision_date"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-525", "record": "CERTFR-2022-AVI-525", "field": "initial_release_date"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-525", "record": "CERTFR-2022-AVI-525", "field": "revisions.0.revision_date"}, {"timestamp": "2022-07-18T00:00:00Z", "date_only": true, "value": "2022-07-18", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-13927", "field": "evidence.0.details.due_date", "uuid": "4f3594a1-de25-4c96-a4d8-00f0e8567a7f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-18T00:00:00Z", "date_only": true, "value": "2022-07-18", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2020-13927", "record": "GSD-2020-13927", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "98807c1f-fdca-4653-bf84-b5c8981ecde6"}, {"timestamp": "2023-09-18T22:16:38Z", "date_only": false, "value": "2023-09-18T22:16:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_airflow_dag_rce.rb", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "b84862cc-ee2a-4de3-bb37-6267c5326e7a", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_airflow_dag_rce.rb"}, {"timestamp": "2023-09-19T17:06:18.408Z", "date_only": false, "value": "2023-09-19T17:06:18.408Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2020-13927", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-12-03T17:00:14Z", "date_only": false, "value": "2023-12-03T17:00:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/983", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "a6901b85-3533-478e-a623-3c173c1cf667", "content": "#ExploitObserverAlert\n\nCVE-2020-13927\n\nDESCRIPTION: Exploit Observer has 11 entries related to CVE-2020-13927. The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and is documented at https://airflow.apache.org/docs/1.10.11/security.html", "url": "https://t.me/arpsyndicate/983"}, {"timestamp": "2023-12-13T01:21:46.752Z", "date_only": false, "value": "2023-12-13T01:21:46.752008Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-13927", "record": "GSD-2020-13927", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-14T17:16:32.187Z", "date_only": false, "value": "2024-02-14T17:16:32.187", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-13927", "record": "GSD-2020-13927", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-03-06T11:00:56.284Z", "date_only": false, "value": "2024-03-06T11:00:56.284Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2020-13927", "record": "BIT-AIRFLOW-2020-13927", "field": "published"}, {"timestamp": "2024-07-24T21:03:08.842Z", "date_only": false, "value": "2024-07-24T21:03:08.842589Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-13927", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-07-24T21:03:08.842Z", "date_only": false, "value": "2024-07-24T21:03:08.842589Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-13927", "record": "FKIE_CVE-2020-13927", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-04T12:32:14.443Z", "date_only": false, "value": "2024-08-04T12:32:14.443Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-13927", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:25:56.428Z", "date_only": false, "value": "2024-12-24T20:25:56.428060Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971211", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "6b891fbd-9f80-4e28-8d07-3ec178930740", "url": "https://feedsin.space/feed/CISAKevBot/items/2971211"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "74821096-5a30-45fe-90de-dee1d55753c6"}, {"timestamp": "2025-02-23T02:10:26Z", "date_only": false, "value": "2025-02-23T02:10:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "6e64ab04-92b9-45b4-86a7-523985d13c05"}, {"timestamp": "2025-02-23T04:10:24Z", "date_only": false, "value": "2025-02-23T04:10:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "bde997fc-cac5-4945-b502-29405ac1b48b"}, {"timestamp": "2025-10-21T23:35:32.975Z", "date_only": false, "value": "2025-10-21T23:35:32.975Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-13927", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:32.975Z", "date_only": false, "value": "2025-10-21T23:35:32.975Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2020-13927", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T17:56:14Z", "date_only": false, "value": "2025-10-22T17:56:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HHX9-P69V-CX2J", "record": "GHSA-HHX9-P69V-CX2J", "field": "modified"}, {"timestamp": "2025-10-23T21:12:58Z", "date_only": false, "value": "2025-10-23T21:12:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "9c06c9c8-77f4-42d3-90ff-bbf952c2c13f"}, {"timestamp": "2026-02-02T12:28:28.573Z", "date_only": false, "value": "2026-02-02T12:28:28.573970Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dbec7607-7776-4e23-bea0-3345a82f3aaf", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "6e86d769-8729-4322-b75a-a308b30b10d8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dbec7607-7776-4e23-bea0-3345a82f3aaf"}, {"timestamp": "2026-02-02T12:28:28.573Z", "date_only": false, "value": "2026-02-02T12:28:28.573970Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dbec7607-7776-4e23-bea0-3345a82f3aaf", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "1767984a-5ae4-43e0-b71d-b4fc76b18cd7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dbec7607-7776-4e23-bea0-3345a82f3aaf"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-13927", "field": "timestamps.recorded_at", "uuid": "4f3594a1-de25-4c96-a4d8-00f0e8567a7f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T02:53:54.840Z", "date_only": false, "value": "2026-06-17T02:53:54.840", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-13927", "record": "FKIE_CVE-2020-13927", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:41.637Z", "date_only": false, "value": "2026-06-19T12:47:41.637495Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/12cc8175-03cd-417e-b7ba-26088ec78b01", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "b5b11622-b695-49c1-80ab-1d763e44a5a4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/12cc8175-03cd-417e-b7ba-26088ec78b01"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-13927", "field": "timestamps.recorded_at", "uuid": "ab1cda62-561f-4511-a027-281cf646b789", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:27.557Z", "date_only": false, "value": "2026-06-23T11:13:27.557734Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ab1cda62-561f-4511-a027-281cf646b789", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "1d08a3d5-60fb-4804-9a79-445b06f59708", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ab1cda62-561f-4511-a027-281cf646b789"}, {"timestamp": "2026-06-23T14:04:53.367Z", "date_only": false, "value": "2026-06-23T14:04:53.367143Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3a975489-ff6d-407c-89e5-4fae47082199", "record": "CVE-2020-13927", "field": "creation_timestamp", "uuid": "45853c47-7c05-4f4e-bd76-4393a4edc5d7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3a975489-ff6d-407c-89e5-4fae47082199"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2020-13927", "record": "BIT-AIRFLOW-2020-13927", "field": "modified"}]}