Skip to content
OpenAdvisories
High · 7.5 CVE-2024-35371 EUVD-2024-3399GHSA-2gx6-qrpp-c4p3

Ant-Media-Server vulnerable to Improper Output Neutralization for Logs

Published Nov 29, 2024 · Updated Dec 2, 2024 · Assigned by mitre

Description

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included in log entries without restrictions.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven io.antmedia:ant-media-server < 2.9.0 2.9.0 GHSA-2gx6-qrpp-c4p3

References