CVE-2021-31164: vulnerability in Apache Unomi
Apache Unomi log injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 2.3%
Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.
Affected products
Apache Software Foundation · Apache UnomiRelated CVEs — Apache Unomi
In the same product, most dangerous first.