CVE-2024-23686

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2024-01-19 Modified: 2026-11-08 First seen: 2026-11-08 Status: pending_score

Description

DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.

Affected Software (3)

VendorProductVersion
— — 9.0.0
— — 9.0.0
— — 9.0.0

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.60%
Raw Score 0.006030
Percentile 49.4%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00603
2026-11-12
0.00603
2026-11-10
0.00603
2026-11-09
0.00603
2026-11-08
0.00603

Intelligence Sources

mitre ref →