https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:09:40.432849+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-2121 CVE-2023-2121 — Vault’s KV Diff Viewer Allowed for HTML Injection 2026-10-04T20:09:40.451206+00:00

Affected: HashiCorp Vault, HashiCorp Vault Enterprise

Vault and Vault Enterprise's (Vault) key-value v2 (kv-v2) diff viewer allowed HTML injection into the Vault web UI through key values. This vulnerability, CVE-2023-2121, is fixed in Vault 1.14.0, 1.13.3, 1.12.7, and 1.11.11.