Vulnerability Database

296,138

Total vulnerabilities in the database

CVE-2023-2121

Vault and Vault Enterprise's (Vault) key-value v2 (kv-v2) diff viewer allowed HTML injection into the Vault web UI through key values. This vulnerability, CVE-2023-2121, is fixed in Vault 1.14.0, 1.13.3, 1.12.7, and 1.11.11.

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
Go icon github.com/hashicorp/vault - 1.11.11
Go icon github.com/hashicorp/vault 1.12.0 1.12.7
Go icon github.com/hashicorp/vault 1.13.0 1.13.3
hashicorp / vault 1.12.0 1.12.7
hashicorp / vault - 1.11.11
hashicorp / vault 1.13.0 1.13.3