GitHub Advisoryadvisory · PyPI

GHSA-w695-p3j5-hrj9 Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information

HIGH Published 2023-02-24 Modified 2023-03-06 Official page ↗
Aliases
CVE-2023-25956
Ecosystem
PyPI
Packages
apache-airflow-providers-amazon
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-209
Reviewed
2023-02-24

Affected packages

• PyPI apache-airflow-providers-amazon: < 7.2.1 → fixed in 7.2.1

Description

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1.

Related

Alias · CVE (1)

  • CVE-2023-25956 Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. vulnerability

Weakness · CWE (1)

  • CWE-209 Generation of Error Message Containing Sensitive Information weakness

References