Skip to content
OpenAdvisories

Package · Maven

org.springframework.session:spring-session-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-20866

    Spring Session session ID can be logged to the standard output stream

    In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application …

    org.springframework.session:spring-session-core Maven