Invokable Control Element with Variadic Parameters
CWE-1056
A named-callable or method control element has a signature that supports a variable (variadic) number of parameters or arguments.
We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 9.8. 1 has been exploited in real attacks.
Latest Invokable Control Element with Variadic Parameters vulnerabilities
- 9.8 Critical severity
Apache Airflow's Experimental API Authentication Bypass Exploited
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and i