CVE-2020-17513: Apache Airflow Server-Side Request Forgery (SSRF) in Charts & Query View

[Kaxil Naik]

Versions Affected: < 1.10.13

Description:
The Charts and Query View of the old (Flask-admin based) UI were vulnerable
for SSRF attack.

Thanks,
Kaxil,
on behalf of Apache Airflow PMC