CVE-2023-25695

CVE-2023-25695: Information disclosure in Apache Airflow

Vendor Apache Software Foundation

Product Apache Airflow

Weakness CWE-209 · Error message info leak

Published March 15, 2023

Last update February 13, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2.

Key dates

02Disclosure timeline

March 15, 2023 CVE published

February 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-25695 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/209.html AskarLabs — CWE-209 write-up Generation of Error Message Containing Sensitive Information

Related vulnerabilities

04Related CVE

CVE-2025-24552 WordPress Paytium plugin <= 4.4.11 - Full Path Disclosure (FPD) vulnerability CVE-2024-13536 1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure CVE-2024-13540 WooODT Lite – Delivery & pickup date time location for WooCommerce <= 2.5.1 - Unauthenticated Full Path Dsiclosure CVE-2024-54366 WordPress Vimeography plugin <= 2.4.4 - Full Path Disclosure (FPD) vulnerability CVE-2025-15526 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter