Security Advisory

CVE-2024-25142

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-06-14 08:25:35

Last updated 2025-03-20 19:18:38

Assigner apache

State PUBLISHED

Description

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache Airflow: before 2.9.2. Users are recommended to upgrade to version 2.9.2, which fixes the issue.

← Browse all CVEs View on cve.org ↗