Information Disclosure

apacheairflow is vulnerable to information disclosure. The vulnerability is due to getrenderedtemplatefields of taskinstance.py because secrets are rendered in the UI when the task has not executed which allows an attacker to view unmasked secrets in the rendered template values...