Apache Airflow Information Disclosure Vulnerability (CNVD-2022-78863)

Apache Airflow is an open source platform for creating, managing and monitoring workflows from the Apache Foundation. The platform is scalable and dynamically monitored, etc. An information disclosure vulnerability exists in versions prior to Apache Airflow 2.3.1, which stems from the application’s inadequate protection of sensitive information and could be exploited by attackers to view unmasked secrets in the rendered template values of unexecuted tasks.