PYSEC-2023-103

At a glance

Published
Updated
CVE
CVE-2022-46651
Aliases
BIT-airflow-2022-46651, GHSA-xvw9-3mhm-xjqq

Description

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the connection to exploit it. Users should upgrade to version 2.6.3 or later which has removed the vulnerability.

Affected packages

PackageVersions
PyPI · apache-airflowintroduced 0, fixed 2.6.3

References

Sources

SourceLicence
OSV.devCC-BY 4.0 — PyPA Advisory Database