Description (CNA)
Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cloud Native Computing Foundation (CNCF) / Fluentd | affected 0.12.29 through 0.12.40 |
CWE
No CWE identifiers supplied.
References
- https://access.redhat.com/errata/RHSA-2018:2225
- https://jvn.jp/en/vu/JVNVU95124098/index.html
- https://github.com/fluent/fluentd/blob/v0.12/CHANGELOG.md#bug-fixes
- https://github.com/fluent/fluentd/pull/1733
ADP enrichment
No English description supplied.