~ / search / GHSA-rm7f-mpcj-w4f6

GHSA-rm7f-mpcj-w4f6

Command injection in Apache Unomi

Source: GitHub Advisory Database (reviewed) High CVE-2021-31164

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.unomi:unomi < 1.5.5 1.5.5

Details

As written in the advisory (Markdown source, shown as plain text).

Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.

References

External links from the advisory. They lead to third-party sites.