CVE-2020-17513: Apache Airflow

Medium severity, CVSS 5.3. EPSS: 4.4% chance of exploitation in the next 30 days.

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.

Affected products

• Apache Airflow: before 1.10.13 (fixed in 1.10.13)

Published 2020-12-14. Last modified 2026-06-17.