CVE-2023-40712— Apache Airflow: Secrets can be unmasked in the "Rendered Template"
Quick assessment
Affected
Apache Software Foundation Apache Airflow
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Apache Airflow是美国阿帕奇（Apache）基金会的一套用于创建、管理和监控工作流程的开源平台。该平台具有可扩展和动态监控等特点。 Apache Airflow 2.7.1 之前版本存在信息泄露漏洞，该漏洞源于允许有权查看 UI 中的task/dag 的用户创建 URL，这可能会导致任务的配置被揭露。
Possible ATT&CK Techniques 1 AI
T1530 · Data from Cloud Storage
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-40712
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Airflow: Secrets can be unmasked in the "Rendered Template"
Source: CVE Program / CVE List V5
Vulnerability Description
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the secret configuration of the task that otherwise would be masked in the UI.
Users are strongly advised to upgrade to version 2.7.1 or later which has removed the vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Apache Airflow 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Airflow是美国阿帕奇（Apache）基金会的一套用于创建、管理和监控工作流程的开源平台。该平台具有可扩展和动态监控等特点。 Apache Airflow 2.7.1 之前版本存在信息泄露漏洞，该漏洞源于允许有权查看 UI 中的task/dag 的用户创建 URL，这可能会导致任务的配置被揭露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Airflow | 0 ~ 2.7.1 | - |
|
II. Public POCs for CVE-2023-40712
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-40712
请登录查看更多情报信息。
Patches & Fixes for CVE-2023-40712 (2)
Mailing List Discussions for CVE-2023-40712 (1)
-
https://lists.apache.org/thread/jw1yv4lt6hpowqbb0x4o3tdp0jhx2bts vendor-advisory
IV. Related Vulnerabilities
Same product: Apache Airflow
-
CVE-2026-86473
Apache Airflow: Logout ignores a presented Authorization bea -
CVE-2026-75158
Apache Airflow: Assets events API returns asset events for e -
CVE-2026-82355
Apache Airflow: Session cookie silently overrides explicit A -
CVE-2026-75157
Apache Airflow: Asset queued-events DELETE endpoints gated o -
CVE-2026-59244
Apache Airflow: Secrets masker: `var.json` Variable values n
Same vendor: Apache Software Foundation
-
CVE-2026-97146
Apache YuniKorn: Admission control bypass via system label f -
CVE-2026-78243
Apache YuniKorn: LDAP Group provider panics on lowercase att -
CVE-2026-92393
Apache YuniKorn: Admission control bypass via workload UPDAT -
CVE-2026-93684
Apache Impala: Stored XSS in Impala query plans -
CVE-2026-90466
Apache Impala: Path traversal executes JARs outside trusted
Same weakness: CWE-200
-
CVE-2026-93677
Langflow OSS is affected by multiple vulnerabilities -
CVE-2026-97626
Gitea profile feed disclosure bypassing user visibility -
CVE-2026-106501
Backstage: Sensitive information exposure in Scaffolder -
CVE-2026-106459
Backstage: Improper input validation in Sentry scaffolder ac -
CVE-2026-106334
Chrome<155.0.8059.39支付模块信息泄露漏洞
V. Comments for CVE-2023-40712
No comments yet