CVE-2023-25695

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 2.5.2

Description The issue is related to the generation of error messages containing sensitive information. This could potentially provide useful information to attackers, including the Python/Airflow version and node name, which should not be visible to unauthenticated users.

Recommendations For versions prior to 2.5.2, update to version 2.5.2 or later to resolve the issue. As a temporary workaround, consider restricting access to error messages for unauthenticated users to minimize the risk of exploitation.