Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-85612
HistoryOct 17, 2023 - 12:00 a.m.

Apache Airflow Information Disclosure Vulnerability (CNVD-2023-85612)

2023-10-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
apache
airflow
information disclosure
vulnerability
authenticated attacker
dags.

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.0%

Apache Airflow is the United States Apache (Apache) Foundation’s set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow has an information disclosure vulnerability that can be exploited by an authenticated attacker to list warnings for all DAGs that are not authorized to view.

CPENameOperatorVersion
apache airflowlt2.7.2

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.0%