Security Advisory
CVE-2019-0229
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were vulnerable to cross-site request forgery attacks.