2 matches found
tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
5.5CVSS5.7AI score0.003EPSS
SaveExploits0References7
PT-2024-9218
Name of the Vulnerable Software and Affected Versions: Tuned affected versions not specified Description: A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters, and newlines c...
5.5CVSS6.3AI score0.003EPSS
SaveExploits0References64
20