{"action":"Upgrade org.owasp:dependency-check-maven to 9.0.6 or later.","affected":[{"fixed":"9.0.6","introduced":"9.0.0"}],"component":"org.owasp:dependency-check-maven","cve_ids":["CVE-2024-23686"],"ecosystem":"Maven","epss":0.00603,"exploited":false,"fixed_versions":["9.0.6"],"ghsa_id":"GHSA-frxm-v7q3-v2wv","id":"tcs_01M5N8WP33FSSGSJMK74XN9PTP","modified_at":"2026-07-08T06:49:57.802404687Z","published_at":"2024-01-20T00:30:27Z","references":["https://osv.dev/vulnerability/GHSA-frxm-v7q3-v2wv","https://github.com/jeremylong/DependencyCheck/security/advisories/GHSA-qqhq-8r2c-c3f5","https://nvd.nist.gov/vuln/detail/CVE-2024-23686","https://github.com/advisories/GHSA-qqhq-8r2c-c3f5","https://github.com/jeremylong/DependencyCheck","https://vulncheck.com/advisories/vc-advisory-GHSA-qqhq-8r2c-c3f5"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-frxm-v7q3-v2wv#Maven/org.owasp:dependency-check-maven","url":"https://osv.dev/vulnerability/GHSA-frxm-v7q3-v2wv"}],"summary":"Insertion of Sensitive Information into Log File in OWASP DependencyCheck"}