1 matches found
Crlf injection
Heron versions = 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue...
7.5CVSS9.5AI score0.01498EPSS
SaveExploits0References2Affected Software1
20