CVE-2023-42663

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 2.7.2

Description The issue allows an authorized user with access to read specific DAGs only to read information about task instances in other DAGs. This is due to a lack of protection for internal data. Exploitation of this issue may allow a remote attacker to gain read access to data.

Recommendations For versions prior to 2.7.2, upgrade to version 2.7.2 or newer to mitigate the risk associated with this issue.