Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1056: Invokable Control Element with Variadic Parameters

Base Incomplete Mapping prohibited

A named-callable or method control element has a signature that
supports a variable (variadic) number of parameters or arguments.

Source: MITRE CWE-1056

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-13927 Exploited Public exploit EPSS 100%

    Authentication bypass in Apache Airflow

    The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and …

    apache-airflow PyPI
    KEV Jan 18, 2022