Lucene search
Veracode Vulnerability DatabaseVERACODE:25772HistoryJun 26, 2020 - 6:46 a.m.
Log Injection
2020-06-2606:46:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.002
Percentile
60.8%
generator-jhipster is vulnerable to log injection. The vulnerability is possible because it uses public API for creating log entries for invalid password reset attempts to the user-provided emails during jwt or session authentication, allowing an attacker to forge log entries.
Related
osv
osv
CVE-2020-4072
2020-06-25 20:15:11
Log Forging in generator-jhipster-kotlin
2020-06-25 20:02:51
prion
prion
Authentication flaw
2020-06-25 20:15:00
cvelist
cvelist
CVE-2020-4072 Log Forging in generator-jhipster-kotlin
2020-06-25 20:05:15
github
github
Log Forging in generator-jhipster-kotlin
2020-06-25 20:02:51
cve
cve
CVE-2020-4072
2020-06-25 20:15:11
nvd
nvd
CVE-2020-4072
2020-06-25 20:15:11