2 matches found
Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
...
5.5CVSS6.3AI score0.00298EPSS
SaveExploits0
tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
5.5CVSS5.7AI score0.00298EPSS
SaveExploits0References7
20