Fallos del tipo CWE-117

135 resultados

Injeção em logs (Log Injection)

O software escreve dados do usuário ou de fontes externas diretamente nos logs sem sanitização, permitindo que um atacante injete mensagens falsas, quebre a estrutura do log ou esconda evidências. Isso compromete a auditoria, facilita ataques de negação de serviço e pode levar a falsificação de registros de segurança.

Ejemplo

Um aplicativo web registra logins assim: `log.info("Usuário: " + username + " realizou login")`. Um atacante cria uma conta chamada `admin%0aUSUÁRIO AUTORIZADO: admin` e faz login, injetando uma linha fake no log que simula uma ação de administrador que nunca ocorreu.

Cómo mitigar

Sanitize sempre entradas de usuário antes de registrar (remova quebras de linha, caracteres de controle), use estrutura de logging estruturada (JSON, key-value) em vez de concatenação, e valide/filtre dados na origem. Implemente logs imutáveis ou com assinatura criptográfica para auditoria sensível.

CVE-2026-17481HIGHIBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code executionEPSS 0.9%CVE-2024-0987MEDIUMSichuan Yougou Technology KuERP log neutralization for logsEPSS 0.9%CVE-2026-25548CRITICALInvoicePlane Vulnerable to Remote Code Execution via Local File Inclusion and Log PoisoningEPSS 0.9%CVE-2023-46322—iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostname's initial character may be non-alpEPSS 0.8%CVE-2023-46321—iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usEPSS 0.8%CVE-2025-48432MEDIUMAn issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escapeEPSS 0.8%CVE-2022-22151—CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versiEPSS 0.8%CVE-2019-14854MEDIUMOpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given operator is set to DebEPSS 0.8%CVE-2024-9606HIGHImproper Output Neutralization for Logs in berriai/litellmEPSS 0.8%CVE-2025-27111MEDIUMEscape Sequence Injection vulnerability in Rack lead to Possible Log InjectionEPSS 0.8%CVE-2026-84439MEDIUMApache ZooKeeper: Audit log injection via unsanitized output from multiple sourcesEPSS 0.7%CVE-2026-84501MEDIUMApache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProviderEPSS 0.7%CVE-2026-86522MEDIUMLog injection via an unescaped password reset identity in AshAuthenticationEPSS 0.7%CVE-2024-29022HIGHSession Hijacking via XSS attack in header and session grid in Xibo CMSEPSS 0.7%CVE-2025-54656MEDIUMApache Struts Extras: Improper Output Neutralization for LogsEPSS 0.7%CVE-2024-25047HIGHIBM Cognos Analytics log injectionEPSS 0.6%CVE-2022-1522MEDIUMCognex 3D-A1000 Dimensioning System Improper Output Neutralization for LogsEPSS 0.6%CVE-2026-62948CRITICALOpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UIEPSS 0.6%CVE-2024-1681MEDIUMLog Injection Vulnerability in corydolphin/flask-corsEPSS 0.6%CVE-2021-23266MEDIUMImproper Output Neutralization for Logs in Crafter StudioEPSS 0.6%