CVE-2021-42010
24.10.2022, 14:15
Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.Enginsight
Vendor | Product | Version |
---|---|---|
apache | heron | 𝑥 < 0.20.5-incubating |
𝑥
= Vulnerable software versions