Executive brief
Fluentd Escape Sequence Injection Vulnerability
Affected products
- RubyGems fluentd
Junglewise Threat Intelligence
CVE-2017-10906: Fluentd Escape Sequence Injection Vulnerability
CVE-2017-10906 · Severity: low · CVSS 3 · Published 2022-05-13
Technologies: fluentd (RubyGems). Vendors: RubyGems.
Related threats
- Fluent Fluentd SSRF in out_http output plugin
- Fluent Fluentd denial of service via decompression bomb in input plugins
- Fluent Fluentd information disclosure in Monitor Agent plugin
- Fluent Fluentd path traversal in ${tag} placeholder
- fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)