Lucene search
GoogleOSV:GHSA-545F-PGP7-FWJFHistoryMay 17, 2022 - 12:00 a.m.
Log value insertion in craftercms
2022-05-1700:00:33
Google
osv.dev
7
0.001 Low
EPSS
Percentile
31.5%
An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator.
Related
cvelist
cvelist
CVE-2021-23266 Improper Output Neutralization for Logs in Crafter Studio
2022-05-16 00:00:00
prion
prion
Code injection
2022-05-16 17:15:00
osv
osv
CVE-2021-23266
2022-05-16 17:15:09
nvd
nvd
CVE-2021-23266
2022-05-16 17:15:09
github
github
Log value insertion in craftercms
2022-05-17 00:00:33
cve
cve
CVE-2021-23266
2022-05-16 17:15:09