EUVD-2021-30345

Malicious code in bioql PyPI...

CVE-2021-43410

Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged without first being escaped. Versions affected: master branch before commit 3c5d8c7 1 of airavata-django-portal 1...

CVE-2021-43410

Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged without first being escaped. Versions affected: master branch before commit 3c5d8c7 1 of airavata-django-portal 1...

CVE-2021-43410

Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged without first being escaped. Versions affected: master branch before commit 3c5d8c7 1 of airavata-django-portal 1...

Crlf injection

Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged without first being escaped. Versions affected: master branch before commit 3c5d8c7 1 of airavata-django-portal 1...

CVE-2021-43410

CVE-2021-43410 affects Apache Airavata Django Portal (airavata-django-portal). The issue is a CRLF log injection caused by logging HTTP request parameters without escaping. Vulnerable component: logging of unescaped parameters in the master branch prior to commit 3c5d8c7. Impact details are limit...

CVE-2021-43410 airavata-django-portal allows CRLF log injection because of the lack of escaping in the log statements

Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged without first being escaped. Versions affected: master branch before commit 3c5d8c7 1 of airavata-django-portal 1...

Apache Airavata Django Portal 安全漏洞

Apache Airavata Django Portal is a web interface from the Apache USA Foundation Apache Airavata uses an API to implement the Django web framework. A security vulnerability exists in Apache Airavata Django Portal that stems from some HTTP request parameters being saved without being escaped...

CVE-2021-43410: Improper Output Neutralization for Logs

Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged without first being escaped. Versions affected: master branch before commit 3c5d8c7 1 of airavata-django-portal 1...