CVE-2021-42250CWE-117

Possible log injection

published November 17, 2021

CVSS
—
EPSS
2%
Percentile
78.6
In the wild
Unconfirmed
What it is

Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01820 · 78.6th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2021-11-17T15:10Z
EPSS history
Timeline
  • 17 NOV 15:10Z
    Possible log injection
    cvelistv5