Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.25.0 are vulnerable to log injection. The ability to forge logs may allow an attacker to cover tracks by injecting fake logs and potentially corrupt log files.
CVSS
No CVSS.
References
Configurations
No configuration.
History
22 Jun 2022, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-06-22 15:15
Updated : 2022-06-23 13:18
NVD link : CVE-2022-32549
Mitre link : CVE-2022-32549
JSON object : View
Products Affected
No product.
CWE
No CWE.