Maven/org.owasp:dependency-check-maven CVE-2024-23686: medium 5.3, EPSS 0.60%
Insertion of Sensitive Information into Log File in OWASP DependencyCheck
Action: Upgrade org.owasp:dependency-check-maven to 9.0.6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.0.0 | 9.0.6 | - |
Fixed versions
| 9.0.6 |
Sources
- osv: GHSA-frxm-v7q3-v2wv#Maven/org.owasp:dependency-check-maven
- https://github.com/jeremylong/DependencyCheck/security/advisories/GHSA-qqhq-8r2c-c3f5
- https://nvd.nist.gov/vuln/detail/CVE-2024-23686
- https://github.com/advisories/GHSA-qqhq-8r2c-c3f5
- https://github.com/jeremylong/DependencyCheck
- https://vulncheck.com/advisories/vc-advisory-GHSA-qqhq-8r2c-c3f5
CVE-2024-23686 · published · modified · JSON