https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:40:01.404981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0398 certfr-2023-avi-0398 — De multiples vulnérabilités ont été découvertes dans les produits VMware Spring. Elles permettent à un attaquant de pro… 2026-10-05T15:40:01.408354+00:00 certfr-2023-avi-0398 https://cve.radiocsirt.org/vuln/euvd-2026-214229 EUVD-2026-214229 2026-10-05T15:40:01.408392+00:00 EUVD-2026-214229 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20866 fkie_cve-2023-20866 2026-10-05T15:40:01.408407+00:00

In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application is vulnerable if it is using HeaderHttpSessionIdResolver.

 https://cve.radiocsirt.org/vuln/ghsa-r7qr-f43m-pxfr GHSA-r7qr-f43m-pxfr — Spring Session session ID can be logged to the standard output stream 2026-10-05T15:40:01.408434+00:00

Affected: Maven: org.springframework.session:spring-session-core

In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application is vulnerable if it is using HeaderHttpSessionIdResolver.

 https://cve.radiocsirt.org/vuln/gsd-2023-20866 gsd-2023-20866 2026-10-05T15:40:01.408457+00:00 gsd-2023-20866