BIT-AIRFLOW-2023-46215 Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend

🗓️ 06 Mar 2024 10:52:11Reported by GoogleType

osv🔗 osv.dev👁 22 Views

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider. Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend

Reporter	Title	Published	Views	Family All 20
BDU FSTEC	The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the insufficient protection of registration data, allowing attackers to disclose sensitive information.	23 Jan 202400:00	–	bdu_fstec
CNNVD	Apache Airflow 日志信息泄露漏洞	28 Oct 202300:00	–	cnnvd
CNVD	Apache Airflow Log Information Disclosure Vulnerability	31 Oct 202300:00	–	cnvd
CVE	CVE-2023-46215	28 Oct 202307:10	–	cve
Cvelist	CVE-2023-46215 Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend	28 Oct 202307:10	–	cvelist
EUVD	EUVD-2023-2667	3 Oct 202520:07	–	euvd
Github Security Blog	Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability	28 Oct 202309:30	–	github
NVD	CVE-2023-46215	28 Oct 202308:15	–	nvd
OSV	GHSA-666G-RFC5-C9JV Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability	28 Oct 202309:30	–	osv
OSV	PYSEC-2026-1131 Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability	7 Jul 202611:45	–	osv

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/10/28/1
github	www.github.com/apache/airflow/pull/34954
lists	www.lists.apache.org/thread/wm1jfmks7r6m7bj0mq4lmw3998svn46n
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-46215

13 Jul 2026 16:43Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.01203

SSVC