CVE-2023-2121 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-2121 PUBLISHED

Vault and Vault Enterprise's (Vault) key-value v2 (kv-v2) diff viewer allowed HTML injection into the Vault web UI through key values. This vulnerability, CVE-2023-2121, is fixed in Vault 1.14.0, 1.13.3, 1.12.7, and 1.11.11.

EPSS 0.47% · 64.4th percentile

Risk Scores

EPSS Score

0.47%

64.4th percentile

Affected Products

Vendor	Product	Versions
Bitnami	vault	0, 1.12.0, 1.13.0
Bitnami	vault	0, 1.12.0, 1.13.0

Timeline

Jun 9, 2023 CVE Published
Jun 10, 2023 EPSS Score
Jul 15, 2023 EPSS Score
Aug 19, 2023 EPSS Score
Sep 23, 2023 EPSS Score
Oct 28, 2023 EPSS Score
Jan 7, 2024 EPSS Score
Feb 11, 2024 EPSS Score
Mar 17, 2024 EPSS Score
Apr 21, 2024 EPSS Score
May 26, 2024 EPSS Score
Jun 30, 2024 EPSS Score

References

Open in Interactive Console →