CVE-2023-25695

Advisory

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2. The traceback contains information that might be useful for a potential attacker to better target their attack (Python/Airflow version, node name). This information should not be shown if traceback is shown to unauthenticated user.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-h6g5-wqqr-3mw3
• https://nvd.nist.gov/vuln/detail/CVE-2023-25695
• https://github.com/apache/airflow/pull/29501
• https://github.com/apache/airflow
• https://lists.apache.org/thread/z8w6ckzs61ql365tv4d19k82o67r15p2
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25695