CVE-2022-32549CWE-117

log injection in Sling logging

published June 22, 2022

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.25.0 are vulnerable to log injection. The ability to forge logs may allow an attacker to cover tracks by injecting fake logs and potentially corrupt log files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02449 · 84.3th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2022-06-22T14:25Z
EPSS history
Timeline
  • 22 JUN 14:25Z
    log injection in Sling logging
    cvelistv5