CVE-2024-31869 Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used

🗓️ 18 Apr 2024 07:19:05Reported by GoogleType

osv

osv🔗 osv.dev👁 30 Views

Airflow v2.7.0-2.8.4 Authenticated User Sensitive Configuration Exposur

Reporter	Title	Published	Views	Family All 18
BDU FSTEC	The vulnerability of software used for creating, monitoring, and orchestrating data processing scripts in Apache Airflow lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.	26 Apr 202400:00	–	bdu_fstec
Circl	CVE-2024-31869	19 Apr 202416:41	–	circl
CNNVD	Apache Airflow 安全漏洞	18 Apr 202400:00	–	cnnvd
CNVD	Apache Airflow Information Disclosure Vulnerability (CNVD-2024-20804)	22 Apr 202400:00	–	cnvd
CVE	CVE-2024-31869	18 Apr 202407:19	–	cve
Cvelist	CVE-2024-31869 Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used	18 Apr 202407:19	–	cvelist
EUVD	EUVD-2024-1052	3 Oct 202520:07	–	euvd
Github Security Blog	Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used	18 Apr 202409:30	–	github
NVD	CVE-2024-31869	18 Apr 202408:15	–	nvd
OSV	BIT-AIRFLOW-2024-31869 Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used	20 Apr 202407:16	–	osv

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/04/17/10
pypi	www.pypi.python.org/
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/31xxx/CVE-2024-31869.json
lists	www.lists.apache.org/thread/pz6vg7wcjk901rmsgt86h76g6kfcgtk3
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-31869
github	www.github.com/apache/airflow/pull/38795

15 Jul 2026 01:48Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3

EPSS0.01049

airflow vulnerability authenticated user sensitive configuration ui webserver.