CVE-2023-2121

MEDIUM · CVSS 4.3 EPSS 0.42%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-06-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-2121

Severity

MEDIUM

CVSS

4.3

EPSS

0.42%

Original NVD Description

Vault and Vault Enterprise's (Vault) key-value v2 (kv-v2) diff viewer allowed HTML injection into the Vault web UI through key values. This vulnerability, CVE-2023-2121, is fixed in Vault 1.14.0, 1.13.3, 1.12.7, and 1.11.11.