Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/08/22 6:46 p.m.11 views

CVE-2025-54812 Apache Log4cxx: Improper HTML escaping in HTMLLayout

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript in order t...

2.1CVSS0.01162EPSS
SaveExploits0References3
Rows per page
Query Builder