Not rated
CVE-2023-20859 In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is…
Description
In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spring Vault, Spring Cloud Vault, Spring Cloud Config | Versions not published |