CVE-2021-31164CWE-93

Apache Unomi log injection

published May 4, 2021

CVSS
—
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02283 · 83.0th percentile
Weakness
CWE-93 · Improper Neutralization of CRLF Sequences ('CRLF Injection')
Published
2021-05-04T06:55Z
EPSS history
Timeline
  • 04 MAY 06:55Z
    Apache Unomi log injection
    cvelistv5