| Package | Affected versions | Patched versions |
|---|---|---|
| cloverdx | = 5.16.0= 5.16.1≥ 5.14.0, ≤ 5.14.3≥ 5.15.0, ≤ 5.15.3≥ 5.17.0, < 5.17.3 | 5.17.3 |
CloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log is enabled and single sign-on is not employed. The fixed versions are 5.15.4, 5.16.2, 5.17.3, and 6.0.x.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free