Description
In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.
Remediation
References
https://spring.io/security/cve-2023-20859
Related Vulnerabilities
CVE-2014-0014 Vulnerability in npm package ember
CVE-2023-24445 Vulnerability in maven package org.jenkins-ci.plugins:openid
CVE-2023-49145 Vulnerability in maven package org.apache.nifi:nifi-jolt-transform-json-ui
CVE-2017-1000389 Vulnerability in maven package org.jenkins-ci.plugins:plugin
CVE-2022-45787 Vulnerability in maven package org.apache.james:apache-mime4j-storage