https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 19 Sep 2026 01:53:08 +0000 https://vulnerability.circl.lu/sighting/0f41901c-5fbb-4823-95d2-7b642226d9fb/export {"uuid": "0f41901c-5fbb-4823-95d2-7b642226d9fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75523", "type": "seen", "source": "https://gist.github.com/alon710/5b0e181a2056c4129c0abf0e0a3f21b2", "content": "# CVE-2026-75523: CVE-2026-75523: Exposure of Sensitive Query Parameter Secrets in Steeltoe Actuator Endpoints\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75523\n\n## Summary\nSteeltoe, a popular framework for building cloud-native .NET applications, contains a critical data-exposure flaw in its HttpExchanges actuator endpoint before version 4.3.0. When explicitly configured to include query strings, the system records and stores sensitive values (such as OAuth tokens and credentials) in memory and application debug logs without sanitization, exposing them to unauthorized network actors.\n\n## TL;DR\nUnsanitized logging of request query parameters in Steeltoe's HttpExchanges actuator endpoint leaks secrets (OAuth tokens, API keys) in memory and debug log files to unauthorized actors.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200, CWE-532\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.9 (Medium)\n- **Exploit Status**: poc\n- **CISA KEV Status**: No\n- **Attack Complexity**: High\n- **Impact**: High (Information Disclosure)\n\n## Affected Systems\n\n- Applications utilizing the SteeltoeOSS Steeltoe framework specifically using Steeltoe.Management.Endpoint package versions prior to 4.3.0.\n- **Steeltoe.Management.Endpoint**: < 4.3.0 (Fixed in: `4.3.0`)\n\n## Mitigation\n\n- Upgrade the Steeltoe.Management.Endpoint package dependency to version 4.3.0 or later.\n- Disable query-string capture within the application configuration parameters if upgrading is not immediately viable.\n- Restrict network routing to actuator endpoints using security groups, reverse proxies, or internal API gateways.\n\n**Remediation Steps:**\n1. Open your application's configuration file (e.g., appsettings.json).\n2. Locate the Management section and modify the HttpExchanges configuration to disable query-string inclusion: 'Management:Endpoints:HttpExchanges:IncludeQueryString = false'.\n3. Update your project file dependencies to reference Steeltoe version 4.3.0: ''.\n4. Rebuild the application and deploy the compiled assemblies to staging environments for regression testing.\n5. Review the production environment logger configuration to ensure that the logging level for 'Steeltoe.Management.Endpoint.Actuators.HttpExchanges' is restricted to 'Information' or 'Warning' rather than 'Debug' or 'Trace'.\n\n## References\n\n- [Official Steeltoe OSS Security Advisory](https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-8phw-xrj9-cpqp)\n- [Steeltoe Patch Commit](https://github.com/SteeltoeOSS/Steeltoe/commit/9bf0ecb9f2d4a34b65f61d41c5625d49071ae9fa)\n- [Steeltoe OSS Release 4.3.0 tag](https://github.com/SteeltoeOSS/Steeltoe/releases/tag/4.3.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75523) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-17T20:31:26.553990Z"} {"uuid": "0f41901c-5fbb-4823-95d2-7b642226d9fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75523", "type": "seen", "source": "https://gist.github.com/alon710/5b0e181a2056c4129c0abf0e0a3f21b2", "content": "# CVE-2026-75523: CVE-2026-75523: Exposure of Sensitive Query Parameter Secrets in Steeltoe Actuator Endpoints\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75523\n\n## Summary\nSteeltoe, a popular framework for building cloud-native .NET applications, contains a critical data-exposure flaw in its HttpExchanges actuator endpoint before version 4.3.0. When explicitly configured to include query strings, the system records and stores sensitive values (such as OAuth tokens and credentials) in memory and application debug logs without sanitization, exposing them to unauthorized network actors.\n\n## TL;DR\nUnsanitized logging of request query parameters in Steeltoe's HttpExchanges actuator endpoint leaks secrets (OAuth tokens, API keys) in memory and debug log files to unauthorized actors.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200, CWE-532\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.9 (Medium)\n- **Exploit Status**: poc\n- **CISA KEV Status**: No\n- **Attack Complexity**: High\n- **Impact**: High (Information Disclosure)\n\n## Affected Systems\n\n- Applications utilizing the SteeltoeOSS Steeltoe framework specifically using Steeltoe.Management.Endpoint package versions prior to 4.3.0.\n- **Steeltoe.Management.Endpoint**: < 4.3.0 (Fixed in: `4.3.0`)\n\n## Mitigation\n\n- Upgrade the Steeltoe.Management.Endpoint package dependency to version 4.3.0 or later.\n- Disable query-string capture within the application configuration parameters if upgrading is not immediately viable.\n- Restrict network routing to actuator endpoints using security groups, reverse proxies, or internal API gateways.\n\n**Remediation Steps:**\n1. Open your application's configuration file (e.g., appsettings.json).\n2. Locate the Management section and modify the HttpExchanges configuration to disable query-string inclusion: 'Management:Endpoints:HttpExchanges:IncludeQueryString = false'.\n3. Update your project file dependencies to reference Steeltoe version 4.3.0: ''.\n4. Rebuild the application and deploy the compiled assemblies to staging environments for regression testing.\n5. Review the production environment logger configuration to ensure that the logging level for 'Steeltoe.Management.Endpoint.Actuators.HttpExchanges' is restricted to 'Information' or 'Warning' rather than 'Debug' or 'Trace'.\n\n## References\n\n- [Official Steeltoe OSS Security Advisory](https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-8phw-xrj9-cpqp)\n- [Steeltoe Patch Commit](https://github.com/SteeltoeOSS/Steeltoe/commit/9bf0ecb9f2d4a34b65f61d41c5625d49071ae9fa)\n- [Steeltoe OSS Release 4.3.0 tag](https://github.com/SteeltoeOSS/Steeltoe/releases/tag/4.3.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75523) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-17T20:31:26.553990Z"} https://vulnerability.circl.lu/sighting/0f41901c-5fbb-4823-95d2-7b642226d9fb/export Thu, 17 Sep 2026 20:31:26 +0000