Falhas do tipo CWE-117

121 resultados

Injeção em logs (Log Injection)

O software escreve dados não sanitizados nos logs, permitindo que um atacante injete conteúdo malicioso (quebras de linha, caracteres de controle, formatação falsa) que pode ser interpretado como eventos legítimos, mascarar atividades suspeitas ou enganar ferramentas de monitoramento.

Exemplo

Um servidor web registra a URL solicitada diretamente no log sem filtrar quebras de linha. Um atacante envia requisição com payload como `/page?id=123%0aAdmin login failed`, que escreve nos logs como se fosse dois eventos separados, ocultando a atividade real ou imitando um acesso autorizado.

Como mitigar

Sanitize todos os dados antes de escrever em logs: remova ou escape caracteres de controle (\n, \r, \0), use formatação estruturada (JSON, syslog) em vez de concatenação de strings, e implemente validação rigorosa de entrada. Ferramentas de SIEM devem também rejeitar logs com estrutura inesperada.

CVE-2025-41429LOWa-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated atEPSS 0.4%CVE-2026-87859MEDIUMmorgan vulnerable to Log Injection via unescaped double quote in quoted log fieldsEPSS 0.4%CVE-2025-20384MEDIUMUnauthenticated Log Injection in Splunk EnterpriseEPSS 0.4%CVE-2023-38020MEDIUMIBM SOAR QRadar Plugin App log injectionEPSS 0.4%CVE-2024-13949MEDIUMLog ForgingEPSS 0.4%CVE-2025-57564HIGHCubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/inserEPSS 0.4%CVE-2025-58580MEDIUMInjection via log fileEPSS 0.4%CVE-2025-59476MEDIUMJenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified coEPSS 0.4%CVE-2023-7234MEDIUMIntegration Objects OPC UA Server Toolkit Improper Output Neutralization for LogsEPSS 0.4%CVE-2023-28952MEDIUMIBM Cognos Controller log injectionEPSS 0.4%CVE-2024-45808MEDIUMMalicious log injection via access logs in envoyEPSS 0.4%CVE-2026-48083MEDIUMOpenReception: Unauthenticated POST /api/log accepts arbitrary content with CRLF injection and no size or rate limitsEPSS 0.3%CVE-2023-32712HIGHUnauthenticated Log Injection in Splunk EnterpriseEPSS 0.3%CVE-2026-5078MEDIUMmorgan vulnerable to Log Forging via unneutralized control characters in :remote-userEPSS 0.3%CVE-2025-11627MEDIUMSite Checkup AI Troubleshooting with Wizard and Tips for Each Issue <= 1.47 - Unauthenticated Log File PoisoningEPSS 0.3%CVE-2026-6494MEDIUMAap-mcp-server: aap mcp server: log injection allows social engineering attacks via unsanitized inputEPSS 0.3%CVE-2026-14350MEDIUMVulnerabilities exists in IBM Cloud Pak for Data SystemEPSS 0.3%CVE-2026-54511HIGH@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keysEPSS 0.3%CVE-2026-45565HIGHRoxy-WI: EscapedString validator skips its '..' block when stripping (root cause for several path-traversal/RCE vectors)EPSS 0.3%CVE-2024-0690MEDIUMAnsible-core: possible information leak in tasks that ignore ansible_no_log configurationEPSS 0.3%