4 matches found
CVE-2021-42010
Heron versions = 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue...
9.8CVSS7.1AI score0.01498EPSS
SaveExploits0
CVE-2021-42010
Heron versions = 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue...
9.8CVSS5.8AI score0.01498EPSS
SaveExploits0References2
CVE-2021-42010
CVE-2021-42010 affects Apache Heron: versions
9.8CVSS9.7AI score0.01498EPSS
SaveExploits0References2Affected Software1
CVE-2021-42010 CRLF log injection
Heron versions = 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue...
9.8AI score0.01498EPSS
SaveExploits0References2
20