CVE-2023-35005
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jun 19, 2023
Updated: Jun 27, 2023
CWE ID 200
Summary
CVE-2023-35005 is a vulnerability affecting Apache Airflow from versions 2.5.0 to 2.6.1. In certain situations, the software displays potentially sensitive values to users. However, it's mitigated as the configuration is not displayed in the UI by default, and not all uncensored values are actually sensitive. To address this issue, users are advised to update Apache Airflow to version 2.6.2 or later.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Apache Airflow
Affected Vendors
- Apache Software Foundation