Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 3

Количество 3

nvd логотип

CVE-2026-49091

около 1 месяца назад

Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written to log files without proper neutralization. When the log files are subsequently viewed in a terminal that interprets control sequences, the injected content may alter the displayed log data.

CVSS3: 8
EPSS: Низкий
debian логотип

CVE-2026-49091

около 1 месяца назад

Improper Output Neutralization for Logs (CWE-117) in Kibana can lead t ...

CVSS3: 8
EPSS: Низкий
github логотип

GHSA-787j-ggjh-rhm6

около 1 месяца назад

Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written to log files without proper neutralization. When the log files are subsequently viewed in a terminal that interprets control sequences, the injected content may alter the displayed log data.

CVSS3: 8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-49091

Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written to log files without proper neutralization. When the log files are subsequently viewed in a terminal that interprets control sequences, the injected content may alter the displayed log data.

CVSS3: 8
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2026-49091

Improper Output Neutralization for Logs (CWE-117) in Kibana can lead t ...

CVSS3: 8
0%
Низкий
около 1 месяца назад
github логотип
GHSA-787j-ggjh-rhm6

Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging (CAPEC-93). An attacker can supply specially crafted input that is written to log files without proper neutralization. When the log files are subsequently viewed in a terminal that interprets control sequences, the injected content may alter the displayed log data.

CVSS3: 8
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу