CVE-2023-25956

⚠️ high

Summary

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1.

CVSS Score

7.5

High

EPSS Score

0.4

Exploit Probability

Published Date

2023-02-24

First Seen: 2026-01-05

📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 68.7% of all 338,295 vulnerabilities in our database.

#105,742

Above average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: Oct 23, 2024

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

YES

Can be exploited automatically

💥 Technical Impact

Partial

Limited system impact

🏆 Discovered By

Son Tran from VNPT - VCI kuteminh11

SSVC data provided by CISA

Last Modified 2024-11-21

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE IDs (Weakness Types)

CWE-209

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-42526	🔶 medium	5.3	0.4	In the AWS Secrets Manager and SSM Parameter Store secrets backends of `apache-airflow-providers-amazon` prior to 9.28.0...	2026-05-19
CVE-2026-25604	🔶 medium	5.4	0.4	In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified agai...	2026-03-09

CVE-2023-25956

Summary

📊 Relative Risk Intelligence

🎯 CISA SSVC Assessment Updated: Oct 23, 2024

📦 Affected Products 1

🔗 References 2

🔗 Related CVEs 2