CVE-2023-25956CWE-209

Apache Airflow AWS Provider: Arbitrary file read via AWS provider

High · published February 24, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
74.1
In the wild
Unconfirmed
What it is

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider.

This issue affects Apache Airflow AWS Provider versions before 7.2.1.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01499 · 74.1th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2023-02-24T11:48Z
EPSS history
Timeline
  • 24 FEB 11:48Z
    Apache Airflow AWS Provider: Arbitrary file read via AWS provider
    cvelistv5