CVE-2023-6002

2023-11-0800:15:08

Google

osv.dev

yugabytedb

cross site scripting

log injection

unprivileged attacker

malicious content

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

YugabyteDB is vulnerable to cross site scripting (XSS) via log injection. Writing invalidated user input to log files can allow an unprivileged attacker to forge log entries or inject malicious content into the logs.

References

www.yugabyte.com/