CWE-117: Improper Output Neutralization for Logs
The product constructs a log message from external input, but it does not neutralize or incorrectly neutralizes special elements when the message is written to a log file.
Also known as Log forging.
A kind of CWE-116 Improper Encoding or Escaping of Output.
From the CWE List. © The MITRE Corporation.
Newest
- ibm api connect Multiple Vulnerabilities in IBM API Connect 5.0 Medium
- apache software foundation sling engine Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization No score
- djangoproject django Potential log injection via unescaped geometry form values 6.9 Medium
- No product listed CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name 9.8 Critical
- mozilla firefox, thunderbird +1 more Other issue in the Console component 8.1 High
- ibm concert IBM Concert Software Improper Output Neutralization for Logs 5.3 Medium
- opnsense core OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username 6.9 Medium
- opnsense core OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking 8.1 High
- fail2ban In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf)... 5.3 Medium
- splunk, splunk enterprise +1 more Log Injection through the REST API in Splunk App for Splunk O11y Cloud 4.3 Medium
- corazawaf coraza OWASP Coraza WAF: Native audit-log format allows CRLF injection and log forgery via request body and header fields 5.8 Medium
- invoiceplane InvoicePlane: Log Injection via Unsanitized User Input in Cron Key Error Logging 5.3 Medium
- mesop-dev mesop Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint 5.3 Medium
- ibm concert Multiple Vulnerabilities in IBM Concert Software 4.3 Medium
- ibm websphere application server IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities 3.7 Low
- team-alembic ash authentication Log injection via an unescaped password reset identity in AshAuthentication 6.3 Medium
- apache zookeeper Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider 5.3 Medium
- apache zookeeper Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources 5.3 Medium
- ibm websphere application server IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities 5.3 Medium
- ibm websphere application server IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities 4.8 Medium
- morgan morgan vulnerable to Log Injection via unescaped double quote in quoted log fields 5.3 Medium
- ibm cloud pak for data system Vulnerabilities exists in IBM Cloud Pak for Data System 5.3 Medium
- ibm netezza software, netezza performance server +1 more Vulnerabilities exists in IBM Netezza Software 5.3 Medium
- morgan morgan vulnerable to Log Forging via unescaped Unicode line separators 5.3 Medium
- jahlives openssl encrypt openssl_encrypt before 1.4.9 Terminal Injection via info Command 9.3 Critical
- jahlives openssl encrypt openssl_encrypt before 1.4.9 Terminal Injection via key_id 9.3 Critical
- jahlives openssl encrypt openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Command 9.3 Critical
- dahlia logtape @logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys 8.6 High
-
github.com/tinfoil-factory/netfoilGo netfoil vulnerable to improper handling of untrusted DoH response data 2.7 Low - wazuh Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Username 5.3 Medium
- jahlives openssl encrypt openssl_encrypt before 1.4.0 Logging Bug and Race Condition 9.3 Critical
- ibm documentation offline IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution 8.8 High
- ibm i IBM i is Affected By Multiple Vulnerabilities in Navigator for i 4.3 Medium
- open-reception appointment-booking-software OpenReception: Unauthenticated POST /api/log accepts arbitrary content with CRLF injection and no size or rate limits 6.5 Medium
- openwrt OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI 9.6 Critical
-
github.com/tinfoil-factory/netfoilGo netfoil: Attacker controlled data written to logs 2.3 Low - eclipse foundation csi - pia The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates that string into three log statements before any validation g… 6.9 Medium
- upkeeper solutions instant privilege access Improper output neutralization for logs vulnerability in upKeeper Solutions upKeeper Instant... 7.9 High
- crawl4ai Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU 9.2 Critical
- splunk soar Log Injection through HTTP Request Paths in Splunk SOAR 4.3 Medium
- roxy-wi Roxy-WI: EscapedString validator skips its '..' block when stripping (root cause for several path-traversal/RCE vectors) 8.1 High
- qriouslad debug log manager – conveniently monitor and inspect errors Debug Log Manager <= 2.5.0 - Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Action 5.3 Medium
- morgan morgan vulnerable to Log Forging via unneutralized control characters in :remote-user 5.3 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 more OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages 6.5 Medium
- red hat ansible automation platform 2 Aap-mcp-server: aap mcp server: log injection allows social engineering attacks via unsanitized input 5.3 Medium
- apache log4j, apache software foundation log4j core +1 more Apache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibility 6.9 Medium
- ibm maximo application suite - monitor component, maximo application suite +1 more IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to . 4.0 Medium
-
github.com/OliveTin/OliveTinGo OliveTin's email argument makes compliance harder, enables log injection 6.9 Medium - apache zookeeper, red hat amq broker 7.12.7, amq broker 7.13.5 +14 more +16 more Apache ZooKeeper: Sensitive information disclosure in client configuration handling 7.5 High
- 2n access commander Log Pollution - Control Characters Not Escaped 6.9 Medium
- Show olderLoading…