Skip to content
OpenAdvisories
High · 7.5 CVE-2023-25956 EUVD-2023-0810GHSA-w695-p3j5-hrj9PYSEC-2026-771

Apache Airflow AWS Provider: Arbitrary file read via AWS provider

Published Feb 24, 2023 · Updated Oct 23, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Airflow AWS Provider Package: apache-airflow-providers-amazon Ecosystem: PyPI

Description

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider.

This issue affects Apache Airflow AWS Provider versions before 7.2.1.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Airflow AWS Provider < 7.2.1 7.2.1

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-airflow-providers-amazon < 7.2.1 7.2.1 GHSA-w695-p3j5-hrj9

References