airflow-configuration-exposure: Apache Airflow Configuration Page - Detect

日期: 2025-08-01 | 影响软件: Apache Airflow | POC: 已公开

漏洞描述

Apache Airflow configuration page was detected.

PoC代码[已公开]

id: airflow-configuration-exposure

info:
  name: Apache Airflow Configuration Page - Detect
  author: pdteam
  severity: medium
  description: Apache Airflow configuration page was detected.
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    cvss-score: 5.3
    cwe-id: CWE-200
  metadata:
    max-request: 1
  tags: exposure,config,airflow,apache,vuln

http:
  - method: GET
    path:
      - '{{BaseURL}}/airflow.cfg'

    matchers:
      - type: word
        words:
          - '[core]'
          - '[api]'
        condition: and
# digest: 4a0a0047304502204d8cccb580841c6014222971057f9398bf577ab8add4879fdb32d0bc8c23a824022100d2cdfea832ef8859f90bbc372a7548bc4ab37c833c7b55d6b8133ca95f8f2b5d:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/configs/airflow-configuration-exposure.yaml

相关漏洞推荐