Threat database

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 1.5%	CVE-2023-44483Apache Santuario · Sensitive Data in Logs HighEPSS 1.5%2023-10-20CVE Database V5CVE-2023-44483 Apache Santuario XML Security for Java versions prior to 2.2.6, 2.3.4, and 3.0.3 contain a vulnerability where private keys may be logged when debug logging is enabled during XML Signature generation using the JSR 105 API. This can lead to sensitive information disclosure through log files. The issue is fixed in versions 2.2.6, 2.3.4, and 3.0.3. EPSS 1.5%Vulnerability Apache Software Foundation CWE-532	CVE Database V5	2023-10-20

Page 1 of 1