The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the lack of protection for operational data, allowing attackers to obtain confidential information.
🗓️ 14 Feb 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec🔗 bdu.fstec.ru👁 12 Views
| Reporter | Title | Published | Views | Family All 24 |
|---|---|---|---|---|
 | CVE-2023-45348 | 14 Oct 202314:29 | – | circl |
 | Apache Airflow 信息泄露漏洞 | 14 Oct 202300:00 | – | cnnvd |
 | Apache Airflow Information Disclosure Vulnerability (CNVD-2023-85611) | 17 Oct 202300:00 | – | cnvd |
 | CVE-2023-45348 | 14 Oct 202309:46 | – | cve |
 | CVE-2023-45348 Apache Airflow: Configuration information leakage vulnerability | 14 Oct 202309:46 | – | cvelist |
 | EUVD-2023-0024 | 3 Oct 202520:07 | – | euvd |
 | Apache Airflow vulnerable to sensitive information exposure when expose-config is set to non-sensitive-only | 14 Oct 202312:30 | – | github |
 | CVE-2023-45348 | 14 Oct 202310:15 | – | nvd |
 | BIT-2023-45348 | 19 Oct 202306:17 | – | osv |
| BIT-2023-46288 | 29 Oct 202307:16 | – | osv |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Feb 2024 00:00Current
5.5Medium risk
Vulners AI Score5.5
CVSS 24
CVSS 34.3
EPSS0.01232