CVE-2024-50378 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2024-50378 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2024-50378

creationtimestamp| type| source ---|---|--- 2024-11-08 14:40:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113447849756495688 2024-11-08 17:12:24+00:00| seen| https://t.me/cvedetector/10199...

CVE-2024-50378

Apache Airflow versions before 2.10.3 are vulnerable to CWE-201 (Insertion of Sensitive Information Into Sent Data). When sensitive variables are configured using the airflow CLI , their values are recorded unencrypted in the audit logs and the Airflow database. This allows authenticated users wi...