1 matches found
CVE-2025-57564: Improper Output Neutralization for Logs
CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...
8.2CVSS6.1AI score0.00368EPSS
SaveExploits0References1
20