[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdx3oD8n1gU87buXzA7CdO1tPbBP14m3KI1kLNwZg1Mk":3,"g5a-risk:CVE-2023-51702":143},{"success":4,"data":5,"meta":140},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":46,"references":47,"referencesCount":81,"weaknesses":82,"weaknessesCount":46,"isActivelyExploited":97,"cisaInfo":27,"otxData":27,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":138,"notableEvents":139},"CVE-2023-51702","What is CVE-2023-51702?","Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this configuration file as a dictionary and sends it to the triggerer by storing it in metadata without any encryption. Additionally, if used with an Airflow version between 2.3.0 and 2.6.0, the configuration dictionary will be logged as plain text in the triggerer service without masking. This allows anyone with access to the metadata or triggerer log to obtain the configuration file and use it to access the Kubernetes cluster.\n\nThis behavior was changed in version 7.0.0, which stopped serializing the file contents and started providing the file path instead to read the contents into the trigger. Users are recommended to upgrade to version 7.0.0, which fixes this issue.","Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this confi...","2024-01-24T13:15:08.15","2025-06-11T17:15:36.34",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00381,[34,34,34,34,34,34,34],"Medium",[38,43],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"apache","airflow","*","cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":41,"criteria":45,"vulnerable":4},"airflow_cncf_kubernetes","cpe:2.3:a:apache:airflow_cncf_kubernetes:*:*:*:*:*:*:*:*",2,[48,54,60,63,66,71,73,75,77,79],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F01\u002F24\u002F3","Openwall",[52,53],"Mailing List","Third Party Advisory",{"url":55,"source":56,"tags":57},"https:\u002F\u002Fgithub.com\u002Fapache\u002Fairflow\u002Fpull\u002F29498","GitHub",[58,59],"Issue Tracking","Patch",{"url":61,"source":56,"tags":62},"https:\u002F\u002Fgithub.com\u002Fapache\u002Fairflow\u002Fpull\u002F30110",[59],{"url":64,"source":56,"tags":65},"https:\u002F\u002Fgithub.com\u002Fapache\u002Fairflow\u002Fpull\u002F36492",[58,59],{"url":67,"source":68,"tags":69},"https:\u002F\u002Flists.apache.org\u002Fthread\u002F89x3q6lz5pykrkr1fkr04k4rfn9pvnv9","Apache",[52,70],"Vendor Advisory",{"url":49,"source":50,"tags":72},[52,53],{"url":55,"source":56,"tags":74},[58,59],{"url":61,"source":56,"tags":76},[59],{"url":64,"source":56,"tags":78},[58,59],{"url":67,"source":68,"tags":80},[52,70],10,[83,91],{"id":84,"name":85,"description":86,"extendedDescription":87,"status":88,"abstraction":89,"structure":90},"CWE-532","Insertion of Sensitive Information into Log File","Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.","While logging all information may be helpful during development stages, it is important that logging levels be set appropriately before a product ships so that sensitive user data and system information are not accidentally exposed to potential attackers.\nDifferent log files may be produced and stored for:","Incomplete","Base","Simple",{"id":92,"name":93,"description":94,"extendedDescription":95,"status":96,"abstraction":89,"structure":90},"CWE-312","Cleartext Storage of Sensitive Information","The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.","Because the information is stored in cleartext (i.e., unencrypted), attackers could potentially read it. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.\nWhen organizations adopt cloud services, it can be easier for attackers to access the data from anywhere on the Internet.\nIn some systems\u002Fenvironments such as cloud, the use of \"double encryption\" (at both the software and hardware layer) might be required, and the developer might be solely responsible for both layers, instead of shared responsibility with the administrator of the broader system\u002Fenvironment.","Draft",false,[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2023-51702? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-51702, a medium severity cyber security vulnerability from 2024. Since version 5.2.0, when using deferrable mode with the ...","CVE-2023-51702, CVE-2023-51702 vulnerability, CVE-2023-51702 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, apache security, airflow vulnerability, airflow_cncf_kubernetes vulnerability","\u002Fwhat-is\u002Fcve-2023-51702",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":10,"dateModified":11,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-51702","Cybersecurity","CVE-2023-51702, CVE-2023-51702 vulnerability, CVE-2023-51702 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125],{"Operator":27,"Negate":27,"Nodes":126},[127],{"Operator":128,"Negate":27,"CPEMatch":129},"OR",[130,134],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":27},"6592EF36-124C-4817-AAA7-33E0D5C1AB57","2.3.0","2.6.1",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":135,"VersionStartExcluding":27,"VersionStartIncluding":136,"VersionEndExcluding":137,"VersionEndIncluding":27},"FD1C8DDC-BBE7-494E-87EF-F478DB8453C0","5.2.0","7.0.0",[],[],{"lastModified":11,"cacheTime":141,"version":142},1793196812177,"2.0",{"score":144,"band":145,"action":146,"scoredAt":147},24,"Low","Monitor","2026-07-01T10:31:47.50083+00:00"]