[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkySzEzxvD2AKXiYO3jOciuRjdiyniooBN0utSE5FCy8":3,"g5a-risk:CVE-2021-38540":128},{"success":4,"data":5,"meta":126},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":58,"weaknesses":59,"weaknessesCount":58,"isActivelyExploited":73,"cisaInfo":26,"otxData":26,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":110,"notableEvents":111},"CVE-2021-38540","What is CVE-2021-38540?","The variable import endpoint was not protected by authentication in Airflow >=2.0.0, =2.0.0, \u003C2.1.3.","2021-09-09T15:15:09.17","2023-11-07T03:37:26.45",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[30],{"Source":16,"Type":17,"CVSSData":31,"BaseSeverity":24,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.80938,[38,38,38,38,38,38,38],"Critical",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"apache","airflow","*","cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",1,[49,53],{"url":50,"source":51,"tags":52},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frac2ed9118f64733e47b4f1e82ddc8c8020774698f13328ca742b03a2%40%3Cannounce.apache.org%3E","Apache",[],{"url":54,"source":51,"tags":55},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frb34c3dd1a815456355217eef34060789f771b6f77c3a3dec77de2064%40%3Cusers.airflow.apache.org%3E",[56,57],"Mailing List","Vendor Advisory",2,[60,68],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",{"id":69,"name":70,"description":71,"extendedDescription":64,"status":65,"abstraction":72,"structure":67},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","Base",false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2021-38540? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-38540, a critical severity cyber security vulnerability from 2021. High exploit probability (80.9%). The variable import e...","CVE-2021-38540, CVE-2021-38540 vulnerability, CVE-2021-38540 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, apache security, airflow vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-38540",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":9,"dateModified":10,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-38540","Cybersecurity","CVE-2021-38540, CVE-2021-38540 vulnerability, CVE-2021-38540 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":26,"Negate":26,"Nodes":102},[103],{"Operator":104,"Negate":26,"CPEMatch":105},"OR",[106],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":107,"VersionStartExcluding":26,"VersionStartIncluding":108,"VersionEndExcluding":109,"VersionEndIncluding":26},"8DA42686-DCA0-45F1-8AB6-E56F0C9EF0C0","2.0.0","2.1.3",[],[112,119],{"id":113,"eventType":114,"eventTime":115,"details":116,"label":117,"color":118},"b9de6122-e0b4-4fc2-97cd-568c742a02d0","LOW_EPSS_DELTA","2025-11-19T04:05:56.289421+00:00","Daily EPSS score decreased by 0.323 on 2023-12-30","EPSS Score Decreased","green",{"id":120,"eventType":121,"eventTime":122,"details":123,"label":124,"color":125},"0b290526-9a1b-446f-b0b2-315db2ff76d4","HIGH_EPSS_DELTA","2025-11-22T04:05:44.827731+00:00","Daily EPSS score increased by 0.323 on 2023-12-30","EPSS Score Increased","red",{"lastModified":10,"cacheTime":127,"version":32},1793196018891,{"score":129,"band":130,"action":131,"scoredAt":132},66,"Medium","Plan remediation","2026-07-01T10:26:57.798557+00:00"]