2 ms·
> - not proper usage of logs formats Multiple people said they were able to trigger the RCE by supplying the syntax in question in log parameters, so the CVE i
by formerly_proven 5y ago
> - not proper usage of logs formats
Multiple people said they were able to trigger the RCE by supplying the syntax in question in log parameters, so the CVE is independent of whether people let users provide a format string or not (log.info("foo: %s", var) vs. log.info(var)).