Lucene search

K
osvGoogleOSV:GO-2020-0001
HistoryApr 14, 2021 - 8:04 p.m.

Arbitrary log line injection in github.com/gin-gonic/gin

2021-04-1420:04:52
Google
osv.dev
13
arbitrary log injection
github.com/gin-gonic/gin
logger middleware
attackers
request path manipulation

EPSS

0.002

Percentile

54.9%

The default Formatter for the Logger middleware (LoggerConfig.Formatter), which is included in the Default engine, allows attackers to inject arbitrary log entries by manipulating the request path.