CVE-2023-25956
Assigner: apache
Published: 2023-02-24T11:48:33.110Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache Airflow AWS Provider
vendor: Apache Software Foundation
versions: lessThan: 7.2.1
status: affected
version: 0
versionType: semver
configurations: supportingMedia: base64: no
type: text/html
value: Using the "AWS" Provider for Apache Airflow<br>
value: Using the "AWS" Provider for Apache Airflow

credits: type: finder
value: Son Tran from VNPT - VCI
type: finder
value: kuteminh11
descriptions: supportingMedia: base64: no
type: text/html
value: Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider.<br><br><p>This issue affects Apache Airflow AWS Provider versions before 7.2.1.</p>
value: Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider.

This issue affects Apache Airflow AWS Provider versions before 7.2.1.


metrics: other: content: text: moderate
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-209
description: CWE-209 Generation of Error Message Containing Sensitive Information
type: CWE
source: discovery: UNKNOWN
title: Apache Airflow AWS Provider: Arbitrary file read via AWS provider
x_generator: engine: Vulnogram 0.1.0-dev