Description
In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.
Remediation
References
https://spring.io/security/cve-2023-20859
Related Vulnerabilities
CVE-2013-2186 Vulnerability in maven package commons-fileupload:commons-fileupload
CVE-2023-50764 Vulnerability in maven package org.jenkins-ci.plugins:scriptler
CVE-2023-30528 Vulnerability in maven package org.jenkins-ci.plugins:wso2id-oauth
CVE-2011-1582 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2012-5055 Vulnerability in maven package org.springframework.security:spring-security-core