CVE-2023-6002mediumCWE-117

CVE-2023-6002: medium-severity vulnerability in YugabyteDB

Log Injection

Published · Updated

Follow this CVE+ Monitor YugabyteDB

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.5%
YugabyteDB is vulnerable to cross site scripting (XSS) via log injection. Writing invalidated user input to log files can allow an unprivileged attacker to forge log entries or inject malicious content into the logs.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
YugabyteDB · YugabyteDB
Related CVEs — YugabyteDB

In the same product, most dangerous first.

CVE-2023-0575HIGHRemote Code ExecutionEPSS 0.8%