6 matches found
Cleartext Credential Logging
A2A Java SDK is vulnerable to Cleartext Credential Logging. The vulnerability is due to improper error handling in RestHandler.parseRequestBody, where the method logs the full JSON request body at SEVERE level when JsonFormat.parser.merge throws InvalidProtocolBufferException, allowing an attacke...
5.7CVSS6AI score0.00174EPSS
SaveExploits0References4Affected Software1
20