~ / search / GHSA-h6g5-wqqr-3mw3

GHSA-h6g5-wqqr-3mw3

Sensitive Information in Error Messages in Apache Airflow

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-25695

Packages

EcosystemPackageAffectedFixed in
PyPI apache-airflow < 2.5.2rc1 2.5.2rc1

Details

As written in the advisory (Markdown source, shown as plain text).

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2. The traceback contains information that might be useful for a potential attacker to better target their attack (Python/Airflow version, node name). This information should not be shown if traceback is shown to unauthenticated user.

References

External links from the advisory. They lead to third-party sites.