Lucene search
Veracode Vulnerability DatabaseVERACODE:13030HistoryJan 15, 2019 - 9:24 a.m.
Escape Sequence Injection
2019-01-1509:24:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.002 Low
EPSS
Percentile
60.4%
Fluentd is vulnerable to escape sequence injection attacks. User input is pushed directly to the logs without filtering, allowing an attacker to change the terminal UI or execute commands on the device parsing the logs.
Related
nessus
nessus
RHEL 8 : fluentd (Unpatched Vulnerability)
2024-05-11 00:00:00
osv
osv
Fluentd Escape Sequence Injection Vulnerability
2022-05-13 01:07:35
CVE-2017-10906
2017-12-08 15:29:00
veracode
veracode
Escape Sequence Injection
2017-12-10 22:32:27
redhat
redhat
(RHSA-2018:2225) Moderate: fluentd security update
2018-07-19 13:40:23
redhatcve
redhatcve
CVE-2017-10906
2017-12-12 04:19:40
nvd
nvd
CVE-2017-10906
2017-12-08 15:29:00
cve
cve
CVE-2017-10906
2017-12-08 15:29:00
prion
prion
Design/Logic Flaw
2017-12-08 15:29:00
cvelist
cvelist
CVE-2017-10906
2017-12-08 15:00:00
github
github
Fluentd Escape Sequence Injection Vulnerability
2022-05-13 01:07:35