Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:39:50 +0000 certfr-2023-avi-0398 — De multiples vulnérabilités ont été découvertes dans les produits VMware Spring. Elles permettent à un attaquant de pro… https://cve.radiocsirt.org/vuln/certfr-2023-avi-0398 certfr-2023-avi-0398 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0398 EUVD-2026-214229 https://cve.radiocsirt.org/vuln/euvd-2026-214229 EUVD-2026-214229 https://cve.radiocsirt.org/vuln/euvd-2026-214229 fkie_cve-2023-20866 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20866 <p>In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application is vulnerable if it is using HeaderHttpSessionIdResolver.</p> <p>In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application is vulnerable if it is using HeaderHttpSessionIdResolver.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-20866 GHSA-r7qr-f43m-pxfr — Spring Session session ID can be logged to the standard output stream https://cve.radiocsirt.org/vuln/ghsa-r7qr-f43m-pxfr <p><strong>Affected:</strong> Maven: org.springframework.session:spring-session-core</p> <p>In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application is vulnerable if it is using HeaderHttpSessionIdResolver.</p> <p><strong>Affected:</strong> Maven: org.springframework.session:spring-session-core</p> <p>In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application is vulnerable if it is using HeaderHttpSessionIdResolver.</p> https://cve.radiocsirt.org/vuln/ghsa-r7qr-f43m-pxfr gsd-2023-20866 https://cve.radiocsirt.org/vuln/gsd-2023-20866 gsd-2023-20866 https://cve.radiocsirt.org/vuln/gsd-2023-20866