CVE-2021-31164 Apache Unomi log injection

2021-05-0406:55:12

CWE-93

apache

www.cve.org

apache unomi

log injection

crlf

escaping.

EPSS

0.001

Percentile

33.4%

JSON

Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.

CNA Affected

[
  {
    "product": "Apache Unomi",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "1.5.5",
        "status": "affected",
        "version": "Apache Unomi",
        "versionType": "custom"
      }
    ]
  }
]

References

unomi.apache.org/security/cve-2021-31164

EPSS

0.001

Percentile

33.4%

JSON

Related for CVELIST:CVE-2021-31164