← All credits

Apache Airavata would like to thank haby0 of Duxiaoman Financial Security Team for reporting this vulnerability.

1 vulnerability record and advisories credit this contributor.

CVE-2021-43410
airavata-django-portal allows CRLF log injection because of the lack of escaping in the log statements