Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-31164

Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.039
EPSS Ranking 87.8%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2021-31164
  • Apache » Unomi » Version: 1.3.0
    cpe:2.3:a:apache:unomi:1.3.0
  • Apache » Unomi » Version: 1.4.0
    cpe:2.3:a:apache:unomi:1.4.0
  • Apache » Unomi » Version: 1.5.0
    cpe:2.3:a:apache:unomi:1.5.0
  • Apache » Unomi » Version: 1.5.1
    cpe:2.3:a:apache:unomi:1.5.1
  • Apache » Unomi » Version: 1.5.2
    cpe:2.3:a:apache:unomi:1.5.2
  • Apache » Unomi » Version: 1.5.3
    cpe:2.3:a:apache:unomi:1.5.3
  • Apache » Unomi » Version: 1.5.4
    cpe:2.3:a:apache:unomi:1.5.4


Contact Us

Shodan ® - All rights reserved