Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2023-25695

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2.

VectorNETWORK

PublishedMar 15, 2023, 10:15

Published Bysecurity@apache.org

Base Score

Score5.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

apache-airflow(PyPI)02.5.2rc1N/A

References

https://github.com/apache/airflow/pull/29501
https://lists.apache.org/thread/z8w6ckzs61ql365tv4d19k82o67r15p2

Weakness Type

CWE-209

CVSS Metrics

Base Score

5.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK