CVE-2015-10011CWE-117

OpenDNS OpenResolve endpoints.py neutralization for logs

Medium · published January 2, 2023

CVSS v3.1
4.6
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output neutralization for logs. The identifier of the patch is 9eba6ba5abd89d0e36a008921eb307fcef8c5311. It is recommended to apply a patch to fix this issue. The identifier VDB-217197 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00900 · 59.3th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2023-01-02T21:00Z
EPSS history
Timeline
  • 02 JAN 21:00Z
    OpenDNS OpenResolve endpoints.py neutralization for logs
    cvelistv5