Description
The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert malicious data and fake entries.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Photon OS | Master build | — |