1 result · Clear filters · Feed
-
Low 3.7
Litestar has potential log injection in exception logging
### Summary Litestar does not escape url paths when logging exceptions. This makes logger vulnerable to CRLF injection if logging level is configured to debug or `log_exceptions` is set to "always", which allows attackers to inject newlines and forge log entr…