CVE-2023-25956 — Apache Airflow AWS Provider: Arbitrary file read via AWS provider

CVE-2023-25956

Apache Airflow AWS Provider: Arbitrary file read via AWS provider PUBLISHED

Description (CNA)

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Airflow AWS Provider	affected 0 before 7.2.1

CWE

CWE-209

References

https://github.com/apache/airflow/pull/29587
https://lists.apache.org/thread/07pl9y4gdpw2c6rzqm77dvkm2z2kb5gv

ADP enrichment

CVE

No English description supplied.

https://github.com/apache/airflow/pull/29587
https://lists.apache.org/thread/07pl9y4gdpw2c6rzqm77dvkm2z2kb5gv

CISA-ADP

No English description supplied.

No references supplied.