Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Airavata Django Portal
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-43410 1 Apache 1 Airavata Django Portal 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged without first being escaped. Versions affected: master branch before commit 3c5d8c7 [1] of airavata-django-portal [1] https://github.com/apache/airavata-django-portal/commit/3c5d8c72bfc3eb0af8693a655a5d60f9273f8170