CVE-2023-45348

Published: Oct 14, 2023
Updated: May 4, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2023-45348" target="_blank" rel="noopener"> CVE-2023-45348
GHSA: <a href="https://github.com/advisories/GHSA-fpxx-xv4c-gxqp" target="_blank" rel="noopener"> GHSA-fpxx-xv4c-gxqp
Severity: Low
Exploit:

Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when the "expose_config" option is set to "non-sensitive-only". The expose_config option is False by default. It is recommended to upgrade to a version that is not affected.