Description
In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.
Remediation
References
https://spring.io/security/cve-2023-20859
Related Vulnerabilities
CVE-2012-3373 Vulnerability in maven package org.apache.wicket:wicket
CVE-2022-22984 Vulnerability in npm package @snyk/snyk-cocoapods-plugin
CVE-2018-8010 Vulnerability in maven package org.apache.solr:solr-core
CVE-2023-0815 Vulnerability in maven package org.opennms:opennms
CVE-2023-39685 Vulnerability in maven package org.hjson:hjson