GHSA-rm7f-mpcj-w4f6
Dashboard / Vulnerabilities / GHSA-rm7f-mpcj-w4f6
Summary: Command injection in Apache Unomi
Details: Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.
References: https://nvd.nist.gov/vuln/detail/CVE-2021-31164, http://unomi.apache.org/security/cve-2021-31164
Affected packages
Package
Name: org.apache.unomi:unomi
Purl: pkg:maven/org.apache.unomi/unomi
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -1.5.5
Affected versions
1.0.0-incubating
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
