Skip to content
OpenAdvisories

Package · Debian

log4cxx

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.1

    Apache Log4cxx: Improper HTML escaping in HTMLLayout

    Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoreticall…