1 result · Clear filters · Feed
-
High 7.5
Apache Unomi log injection
Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.
1 result · Clear filters · Feed
Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.