Description
In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.
Remediation
References
https://spring.io/security/cve-2023-20859
Related Vulnerabilities
CVE-2023-49397 Vulnerability in maven package com.jfinal:jfinal
CVE-2021-41571 Vulnerability in maven package org.apache.pulsar:pulsar
CVE-2017-5641 Vulnerability in maven package org.apache.flex.blazeds:flex-messaging-core
CVE-2023-45811 Vulnerability in npm package deobfuscator
CVE-2015-3250 Vulnerability in maven package org.apache.directory.api:apache-ldap-api