CVE-2021-42010
Assigner: apache
Published: 2022-10-24T00:00:00
State: PUBLISHED
title: CRLF log injection
descriptions: value: Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.
affected: vendor: Apache Software Foundation
product: Apache Heron (Incubating)
versions: version: Apache Heron 0.20.4-incubating
status: affected
lessThanOrEqual: 0.20.4-incubating
versionType: custom
credits: value: The Apache Heron (Incubating) project would like to thank Bo Yu for bringing this matter to our attention.
metrics: other: type: unknown
content: other: low
problemTypes: descriptions: type: text
description: CRLF Injection
x_generator: engine: Vulnogram 0.0.9
source: discovery: UNKNOWN