{"metadata": {"vulnerability": "cve-2020-17515", "count": 35, "kinds": {"milestone": 7, "sighting": 11, "kev": 0, "other": 17}}, "data": [{"timestamp": "2020-08-12T00:00:00Z", "date_only": false, "value": "2020-08-12T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-17515", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-12-11T00:00:00Z", "date_only": true, "value": "2020-12-11", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-17515", "record": "GSD-2020-17515", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2020-12-11T13:40:12Z", "date_only": false, "value": "2020-12-11T13:40:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-17515", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-12-11T14:15:00Z", "date_only": false, "value": "2020-12-11T14:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-86VP-X3PR-79RX", "record": "GHSA-86VP-X3PR-79RX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-12-11T14:15:00Z", "date_only": false, "value": "2020-12-11T14:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2020-21", "record": "PYSEC-2020-21", "field": "published"}, {"timestamp": "2020-12-11T14:15:00Z", "date_only": false, "value": "2020-12-11T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-17515", "record": "GSD-2020-17515", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-12-11T14:15:11.143Z", "date_only": false, "value": "2020-12-11T14:15:11.143", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-17515", "record": "FKIE_CVE-2020-17515", "field": "published"}, {"timestamp": "2020-12-11T16:35:40Z", "date_only": false, "value": "2020-12-11T16:35:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20105", "record": "CVE-2020-17515", "field": "creation_timestamp", "uuid": "b4d24b05-fcae-4b58-92e3-18ded2cdb062", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20105"}, {"timestamp": "2020-12-11T17:25:38Z", "date_only": false, "value": "2020-12-11T17:25:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20125", "record": "CVE-2020-17515", "field": "creation_timestamp", "uuid": "51fa9f8b-c18d-4d66-877b-a8d7b580ef67", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20125"}, {"timestamp": "2020-12-11T18:05:10Z", "date_only": false, "value": "2020-12-11T18:05:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20143", "record": "CVE-2020-17515", "field": "creation_timestamp", "uuid": "76622750-1f91-40b9-b09a-7c955c09ccc0", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20143"}, {"timestamp": "2020-12-11T18:11:18Z", "date_only": false, "value": "2020-12-11T18:11:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20163", "record": "CVE-2020-17515", "field": "creation_timestamp", "uuid": "06eedfbb-7cec-4b0b-936e-c0cf190c9507", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20163"}, {"timestamp": "2020-12-11T18:24:29Z", "date_only": false, "value": "2020-12-11T18:24:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20181", "record": "CVE-2020-17515", "field": "creation_timestamp", "uuid": "86780895-fcee-4bb2-91fe-dd4d3c1f86b5", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20181"}, {"timestamp": "2020-12-11T18:25:24Z", "date_only": false, "value": "2020-12-11T18:25:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20201", "record": "CVE-2020-17515", "field": "creation_timestamp", "uuid": "ab185656-f957-41d0-9961-6986dac1095d", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20201"}, {"timestamp": "2020-12-11T18:31:32Z", "date_only": false, "value": "2020-12-11T18:31:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20221", "record": "CVE-2020-17515", "field": "creation_timestamp", "uuid": "46ad6cbe-5ac6-4897-b494-38010227cdb9", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20221"}, {"timestamp": "2020-12-11T18:34:31Z", "date_only": false, "value": "2020-12-11T18:34:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20240", "record": "CVE-2020-17515", "field": "creation_timestamp", "uuid": "272c482e-9d3c-410f-82fc-8dfdde909dc8", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20240"}, {"timestamp": "2020-12-11T18:37:19Z", "date_only": false, "value": "2020-12-11T18:37:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20248", "record": "CVE-2020-17515", "field": "creation_timestamp", "uuid": "9c8de757-b751-4019-a4c9-f5230a4265e7", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20248"}, {"timestamp": "2020-12-11T19:25:10Z", "date_only": false, "value": "2020-12-11T19:25:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20268", "record": "CVE-2020-17515", "field": "creation_timestamp", "uuid": "7c791810-a31e-4415-892f-182f563fb010", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20268"}, {"timestamp": "2020-12-11T19:34:19Z", "date_only": false, "value": "2020-12-11T19:34:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20287", "record": "CVE-2020-17515", "field": "creation_timestamp", "uuid": "c986cb24-e7e4-437c-8fd2-c02bee16a066", "content": "\u203c CVE-2020-17515 \u203c\n\nThe \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20287"}, {"timestamp": "2020-12-15T00:00:00Z", "date_only": true, "value": "2020-12-15", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-11845", "record": "CNVD-2021-11845", "field": "submitTime"}, {"timestamp": "2021-02-22T00:00:00Z", "date_only": true, "value": "2021-02-22", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-11845", "record": "CNVD-2021-11845", "field": "openTime"}, {"timestamp": "2021-04-20T16:40:14Z", "date_only": false, "value": "2021-04-20T16:40:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-86VP-X3PR-79RX", "record": "GHSA-86VP-X3PR-79RX", "field": "published"}, {"timestamp": "2021-05-04T00:00:00Z", "date_only": true, "value": "2021-05-04", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-17515", "record": "GSD-2020-17515", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-05-04T00:15:00Z", "date_only": false, "value": "2021-05-04T00:15:00Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2020-21", "record": "PYSEC-2020-21", "field": "modified"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-525", "record": "CERTFR-2022-AVI-525", "field": "last_revision_date"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-525", "record": "CERTFR-2022-AVI-525", "field": "initial_release_date"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-525", "record": "CERTFR-2022-AVI-525", "field": "revisions.0.revision_date"}, {"timestamp": "2022-08-06T03:50:00Z", "date_only": false, "value": "2022-08-06T03:50Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-17515", "record": "GSD-2020-17515", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:21:50.028Z", "date_only": false, "value": "2023-12-13T01:21:50.028500Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-17515", "record": "GSD-2020-17515", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T11:00:14.504Z", "date_only": false, "value": "2024-03-06T11:00:14.504Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2020-17515", "record": "BIT-AIRFLOW-2020-17515", "field": "published"}, {"timestamp": "2024-08-04T14:00:48.507Z", "date_only": false, "value": "2024-08-04T14:00:48.507Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-17515", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-04T14:01:40Z", "date_only": false, "value": "2024-08-04T14:01:40.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2020-17515", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-11T17:06:12Z", "date_only": false, "value": "2024-09-11T17:06:12Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-86VP-X3PR-79RX", "record": "GHSA-86VP-X3PR-79RX", "field": "modified"}, {"timestamp": "2025-02-13T16:27:33.389Z", "date_only": false, "value": "2025-02-13T16:27:33.389Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-17515", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-17T02:59:03.287Z", "date_only": false, "value": "2026-06-17T02:59:03.287", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-17515", "record": "FKIE_CVE-2020-17515", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2020-17515", "record": "BIT-AIRFLOW-2020-17515", "field": "modified"}]}