Headline

GHSA-h6g5-wqqr-3mw3: Sensitive Information in Error Messages in Apache Airflow

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2. The traceback contains information that might be useful for a potential attacker to better target their attack (Python/Airflow version, node name). This information should not be shown if traceback is shown to unauthenticated user.

1 year ago

ghsa

Open in Source

#vulnerability #apache #git #auth

GitHub Advisory Database
GitHub Reviewed
CVE-2023-25695

Sensitive Information in Error Messages in Apache Airflow

Low severity GitHub Reviewed Published Mar 15, 2023 to the GitHub Advisory Database • Updated Mar 16, 2023

Package

pip apache-airflow (pip)

Affected versions

< 2.5.2

Published by the National Vulnerability Database

Mar 15, 2023

Published to the GitHub Advisory Database

Mar 15, 2023

Last updated

Mar 16, 2023

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2.

1 year ago

CVE

Open in Source

#vulnerability #apache #auth