Description (CNA)
Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache Software Foundation / Apache Unomi | affected Apache Unomi before 1.5.5 |
CWE
CWE-93
References
ADP enrichment
No English description supplied.