Lucene search
PRIOn knowledge basePRION:CVE-2023-40712HistorySep 12, 2023 - 12:15 p.m.
Design/Logic Flaw
2023-09-1212:15:00
PRIOn knowledge base
www.prio-n.com
5
apache airflow
vulnerability
authenticated users
secret configuration
ui
upgrade
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the secret configuration of the task that otherwise would be masked in the UI.
Users are strongly advised to upgrade to version 2.7.1 or later which has removed the vulnerability.
Related
nvd
nvd
CVE-2023-40712
2023-09-12 12:15:08
github
github
Apache Airflow information exposure vulnerability
2023-09-12 19:25:08
cnvd
cnvd
Apache Airflow Information Disclosure Vulnerability (CNVD-2023-72235)
2023-09-20 00:00:00
osv
osv
BIT-airflow-2023-40712
2024-03-06 10:53:19
CVE-2023-40712
2023-09-12 12:15:08
PYSEC-2023-171
2023-09-12 12:15:00
cvelist
cvelist
cve
cve
CVE-2023-40712
2023-09-12 12:15:08
hackerone
hackerone
Internet Bug Bounty: Secrets can be unmasked in the "Rendered Template"
2023-10-15 09:40:05
nessus
nessus