Cpe:2.3:a:kroxylicious:azure_key_vault_kms_provider:*:*:*:*:*:*:*:*

The Kroxylicious Azure Key Vault KMS provider fails to validate vaultName parameters during EDEK wire-deserialization, enabling SSRF attacks to exfiltrate Azure bearer tokens.