Not rated
CVE-2021-31164 Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements
Description
Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Unomi 1.5 | earliest → < 1.5.5 | 1.5.5 |
References
- unomi.apache.org unomi.apache.org
Timeline
- Published
- Last modified