CVE-2026-75523

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0, the Steeltoe.Management.Endpoint /actuator/httpexchanges endpoint passes recorded request URIs through MaskedUri, which masks URI user information but does not inspect query strings. When Management:Endpoints:HttpExchanges:IncludeQueryString is enabled, the HttpExchangeRequest response can disclose OAuth tokens, password-reset tokens, signed-URL signatures, API keys, and other query-string secrets from prior traffic to a caller that can reach the explicitly exposed endpoint. The Steeltoe.Management.Endpoint.Actuators.HttpExchanges DEBUG logger also records these URIs, creating a second disclosure channel for users with log access. This issue is fixed in version 4.3.0.

• CWE-200

• https://github.com/SteeltoeOSS/Steeltoe/commit/9bf0ecb9f2d4a34b65f61d41c5625d49071ae9fa
• https://github.com/SteeltoeOSS/Steeltoe/releases/tag/4.3.0
• https://github.com/SteeltoeOSS/security-advisories/security/advisories/GHSA-8phw-xrj9-cpqp

Published

Sep 17, 2026

Last Modified

Sep 23, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-75511Novu provides an API for sending notifications through multi…5.3
• CVE-2026-75513Marten is a .NET Transactional Document DB and Event Store o…9.1
• CVE-2026-75514BunkerWeb is an open-source, next-generation Web Application…5.9
• CVE-2026-75516The RabbitMQ Java client library allows Java and JVM-based a…8.7
• CVE-2026-75517Novu provides an API for sending notifications through multi…6.5
• CVE-2026-7552The Geo Mashup plugin for WordPress is vulnerable to authori…5.3
• CVE-2026-75526django CMS is an easy-to-use and developer-friendly enterpri…4.4
• CVE-2026-75528The Broken Link Checker plugin for WordPress is vulnerable t…7.2
• CVE-2026-75529Pandora is affected by a stored cross-site scripting vulnera…6.9
• CVE-2026-7553A vulnerability was found in code-projects Gym Management Sy…4.7
• CVE-2026-75531Pandora contains a stored cross-site scripting (XSS) vulnera…7
• CVE-2026-75538An attacker that connects to an open Erlang TCP port that us…8.2