Fallos del tipo CWE-117

121 resultados

Injeção em logs (Log Injection)

O software escreve dados do usuário ou de fontes externas diretamente nos logs sem sanitização, permitindo que um atacante injete mensagens falsas, quebre a estrutura do log ou esconda evidências. Isso compromete a auditoria, facilita ataques de negação de serviço e pode levar a falsificação de registros de segurança.

Ejemplo

Um aplicativo web registra logins assim: `log.info("Usuário: " + username + " realizou login")`. Um atacante cria uma conta chamada `admin%0aUSUÁRIO AUTORIZADO: admin` e faz login, injetando uma linha fake no log que simula uma ação de administrador que nunca ocorreu.

Cómo mitigar

Sanitize sempre entradas de usuário antes de registrar (remova quebras de linha, caracteres de controle), use estrutura de logging estruturada (JSON, key-value) em vez de concatenação, e valide/filtre dados na origem. Implemente logs imutáveis ou com assinatura criptográfica para auditoria sensível.

CVE-2015-10011MEDIUMOpenDNS OpenResolve endpoints.py neutralization for logsEPSS 0.9%CVE-2026-84439MEDIUMApache ZooKeeper: Audit log injection via unsanitized output from multiple sourcesEPSS 0.8%CVE-2026-25548CRITICALInvoicePlane Vulnerable to Remote Code Execution via Local File Inclusion and Log PoisoningEPSS 0.8%CVE-2022-22151—CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versiEPSS 0.8%CVE-2019-14854MEDIUMOpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given operator is set to DebEPSS 0.8%CVE-2026-84501MEDIUMApache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProviderEPSS 0.8%CVE-2024-9606HIGHImproper Output Neutralization for Logs in berriai/litellmEPSS 0.8%CVE-2025-48432MEDIUMAn issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escapeEPSS 0.8%CVE-2025-27111MEDIUMEscape Sequence Injection vulnerability in Rack lead to Possible Log InjectionEPSS 0.7%CVE-2024-29022HIGHSession Hijacking via XSS attack in header and session grid in Xibo CMSEPSS 0.7%CVE-2023-46322—iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostname's initial character may be non-alpEPSS 0.7%CVE-2023-46321—iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usEPSS 0.7%CVE-2024-25047HIGHIBM Cognos Analytics log injectionEPSS 0.6%CVE-2025-54656MEDIUMApache Struts Extras: Improper Output Neutralization for LogsEPSS 0.6%CVE-2026-62948CRITICALOpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UIEPSS 0.6%CVE-2024-1681MEDIUMLog Injection Vulnerability in corydolphin/flask-corsEPSS 0.6%CVE-2026-17481HIGHIBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code executionEPSS 0.6%CVE-2021-23266MEDIUMImproper Output Neutralization for Logs in Crafter StudioEPSS 0.6%CVE-2022-1522MEDIUMCognex 3D-A1000 Dimensioning System Improper Output Neutralization for LogsEPSS 0.6%CVE-2026-12616MEDIUMThe /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates tEPSS 0.5%