漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Apache Log4cxx: Improper escaping with JSONLayout
Vulnerability Description
Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using JSONLayout, not all payload bytes are properly escaped. If an attacker-supplied message contains certain non-printable characters, these will be passed along in the message and written out as part of the JSON message. This may prevent applications that consume these logs from correctly interpreting the information within them. This issue affects Apache Log4cxx: before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.
CVSS Information
N/A
Vulnerability Type
日志输出的转义处理不恰当
Vulnerability Title
Apache Log4cxx 安全漏洞
Vulnerability Description
Apache Log4cxx是美国阿帕奇(Apache)基金会的一个以 Apache log4j 为模式的 C++ 日志框架。 Apache Log4cxx 1.5.0之前版本存在安全漏洞,该漏洞源于JSONLayout未正确转义所有有效载荷字节,可能导致日志解析错误。
CVSS Information
N/A
Vulnerability Type
N/A