Apache Airflow Information Disclosure Vulnerability (CNVD-2023-55401)

2023-06-2100:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache airflow

united states apache foundation

open source

workflow

information disclosure

vulnerability

sensitive information

attacker

exploit

0.001 Low

EPSS

Percentile

25.9%

JSON

Apache Airflow is the United States Apache (Apache) Foundation’s set of open source platform for creating, managing and monitoring workflow. Apache Airflow suffers from an information disclosure vulnerability, the source program is not sufficiently protected for sensitive information, which can be exploited by an attacker to obtain sensitive information.

CPENameOperatorVersion
apache airflow >=2.5.0,lt2.6.2

CPE	Name	Operator	Version
	apache airflow >=2.5.0,	lt	2.6.2

0.001 Low

EPSS

Percentile

25.9%

JSON

Related for CNVD-2023-55401