CVE-2024-25142: Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content…

medium5.5CVSS 3.1

AVLACLPRLUINSUCHINAN

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache Airflow: before 2.9.2. Users are recommended to upgrade to version 2.9.2, which fixes the issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	airflow	< 2.9.2	2.9.2
apache_software_foundation	apache_airflow	< 2.9.2	2.9.2