Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5545
HistoryDec 10, 2017 - 10:32 p.m.

Escape Sequence Injection

2017-12-1022:32:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.002 Low

EPSS

Percentile

60.4%

Fluentd is vulnerable to escape sequence injection attacks. User input is pushed directly to the logs without filtering, allowing an attacker to change the terminal UI or execute commands on the device parsing the logs.

CPENameOperatorVersion
fluentdle0.12.40

0.002 Low

EPSS

Percentile

60.4%