Information Disclosure

apache_airflow_providers_celery is vulnerable to Information Disclosure. An attacker is able to exploit this vulnerability by tricking a user into running an Airflow job that contains a malicious Celery task. The malicious task would then insert sensitive information into the Airflow logs as clear text when rediss, amqp or rpc protocols are used resulting in exposure of confidential information.