Skip to content
OpenAdvisories

Package · Maven

org.springframework.vault:spring-vault-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.5
    CVE-2023-20859

    Spring Vault vulnerable to insertion of sensitive information into a log file

    In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.

    org.springframework.vault:spring-vault-core Maven