Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-45348
HistoryOct 14, 2023 - 10:15 a.m.

Design/Logic Flaw

2023-10-1410:15:00
PRIOn knowledge base
www.prio-n.com
3
apache airflow
vulnerability
sensitive configuration

4.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.8%

Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when the “expose_config” option is set to “non-sensitive-only”. The expose_config option is False by default.
It is recommended to upgrade to a version that is not affected.

CPENameOperatorVersion
airflowge2.7.0
airflowlt2.7.2

4.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.8%

Related for PRION:CVE-2023-45348