Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-2667

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00193EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/02/14 12:20 p.m.5 views

CVE-2023-46215

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend Note: the vulnerability is about the information exposed in the logs not...

7.5CVSS6.3AI score0.00193EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/04/18 7:19 a.m.30 views

CVE-2024-31869 Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used

Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated user to see sensitive provider configuration via the "configuration" UI page when "non-sensitive-only" was set as "webserver.exposeconfig" configuration The celery provider is the only community provider...

6.3AI score0.00048EPSS
Exploits0References3
OSV
OSV
added 2024/03/06 10:52 a.m.16 views

BIT-AIRFLOW-2023-46215 Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend Note: the vulnerability is about the information exposed in the logs not...

7.5CVSS7.3AI score0.00193EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2023/10/28 9:30 a.m.28 views

Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend Note: the vulnerability is about the information exposed in the logs not...

7.5CVSS7.3AI score0.00193EPSS
Exploits0References5Affected Software2
OSV
OSV
added 2023/10/28 8:15 a.m.22 views

CVE-2023-46215

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend Note: the vulnerability is about the information exposed in the logs not...

7.5CVSS7.3AI score
Exploits0References3
NVD
NVD
added 2023/10/28 8:15 a.m.11 views

CVE-2023-46215

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend Note: the vulnerability is about the information exposed in the logs not...

7.5CVSS7.3AI score0.00193EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/10/28 7:10 a.m.12 views

CVE-2023-46215 Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend Note: the vulnerability is about the information exposed in the logs not...

7.5AI score0.00193EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/10/28 7:10 a.m.15 views

CVE-2023-46215 Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend Note: the vulnerability is about the information exposed in the logs not...

7.3AI score0.00193EPSS
Exploits0References3
CVE
CVE
added 2023/10/28 7:10 a.m.102 views

CVE-2023-46215

CVE-2023-46215 affects Apache Airflow and its Celery provider. The issue is that sensitive information is logged in clear text when using rediss, amqp, or rpc protocols as the Celery result backend. Affected versions: Airflow Celery provider 3.3.0–3.4.0 and Apache Airflow 1.10.0–2.6.3. Impact is ...

7.5CVSS7.3AI score0.00193EPSS
Exploits0References3Affected Software2
Positive Technologies
Positive Technologies
added 2023/10/28 12:0 a.m.2 views

PT-2023-8383 · Apache · Apache Airflow Celery Provider +1

Name of the Vulnerable Software and Affected Versions: Apache Airflow Celery provider versions 3.3.0 through 3.4.0 Apache Airflow versions 1.10.0 through 2.6.3 Description: The issue is related to the insertion of sensitive information into log files when using certain protocols as the Celery...

7.8CVSS7.2AI score0.00193EPSS
Exploits0References12
vulnersOsv
vulnersOsv
added 2022/06/02 2:15 p.m.0 views

apache-airflow-providers-celery (>=2.1.0 <=2.1.0rc2), celery-director (>=0.5.0 <=0.6.0) +4 more potentially affected by CVE-2022-30034 via flower (>=0.9.3 <=1.1.0)

flower PYPI version =0.9.3, =2.1.0, =0.5.0, =0.6.0, =0.2.1a0, =2.10.9 Source cves: CVE-2022-30034 Source advisory: OSV:PYSEC-2022-42973...

8.6CVSS7.2AI score0.00226EPSS
Exploits1
Rows per page
Query Builder