← Back to CVE List

CVE-2023-6002

Published: 2023-11-08T00:15Z
Last Modified: 2024-11-21T08:42Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
YugabyteDB is vulnerable to cross site scripting (XSS) via log injection. Writing invalidated user input to log files can allow an unprivileged attacker to forge log entries or inject malicious content into the logs. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt