← CVE Intelligence

CVE-2023-6002

Log Injection PUBLISHED

Description (CNA)

YugabyteDB is vulnerable to cross site scripting (XSS) via log injection. Writing invalidated user input to log files can allow an unprivileged attacker to forge log entries or inject malicious content into the logs.

Affected (CNA)

Vendor / productVersions
YugabyteDB / YugabyteDBaffected 2.0.0.0 through 2.14.13.0, 2.16.7.0, 2.18.3.0; unaffected 2.14.14.0; unaffected 2.16.8.0; unaffected 2.18.4.0

CWE

CWE-117

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.