Lucene search
ApacheVULNRICHMENT:CVE-2023-40712HistorySep 12, 2023 - 11:05 a.m.
CVE-2023-40712 Apache Airflow: Secrets can be unmasked in the "Rendered Template"
2023-09-1211:05:48
CWE-200
apache
github.com
cve-2023-40712
apache airflow
secrets unmasking
rendered template
vulnerability
authenticated users
ui
configuration
upgrade
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the secret configuration of the task that otherwise would be masked in the UI.
Users are strongly advised to upgrade to version 2.7.1 or later which has removed the vulnerability.
Related
prion
prion
Design/Logic Flaw
2023-09-12 12:15:00
osv
osv
PYSEC-2023-171
2023-09-12 12:15:00
CVE-2023-40712
2023-09-12 12:15:08
BIT-airflow-2023-40712
2024-03-06 10:53:19
cve
cve
CVE-2023-40712
2023-09-12 12:15:08
cvelist
cvelist
cnvd
cnvd
Apache Airflow Information Disclosure Vulnerability (CNVD-2023-72235)
2023-09-20 00:00:00
nvd
nvd
CVE-2023-40712
2023-09-12 12:15:08
github
github
Apache Airflow information exposure vulnerability
2023-09-12 19:25:08
hackerone
hackerone
Internet Bug Bounty: Secrets can be unmasked in the "Rendered Template"
2023-10-15 09:40:05
nessus
nessus
AI Score
6.6
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-40712