CVE-2023-20859
CVE-2023-20859
In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.
Affected products
n/a · Spring Vault, Spring Cloud Vault, Spring Cloud ConfigWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →