A log injection vulnerability arises when the original a log entry can be altered to form one or more altogether different entries. Execution of this altered entry may result in log data that is deceptive and fraudulentcontains unsanitized user input. A malicious user can insert fake log data and consequently deceive system administrators as to the system's behavior (OWASP 2008).
Log injection vulnerabilities may result from including untrusted input in log files. For example, a user might split a legitimate log entry into two log entries by entering a carriage return and line feed (CRLF) sequence, either of which might be misleading. Log injection attacks can be prevented by sanitizing and validating any untrusted input sent to a log.
...
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="e7e1287d9c0c4fbd-1ed02107-48d14c6f-970fb76e-a9e4166668617275b1eb2822"><ac:plain-text-body><![CDATA[ | [ISO/IEC TR 24772:2010 | http://www.aitcnet.org/isai/] | "Injection [RST]" | ]]></ac:plain-text-body></ac:structured-macro> |
CWE-144, "Improper Neutralization of Line Delimiters" | ||||
| CWE-150, "Improper Neutralization of Escape, Meta, or Control Sequences" |
...
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="cdbdafdd88a3e424-91dbf121-4f8244df-a6ab8f8a-731e518b0a9432d995aa44c3"><ac:plain-text-body><![CDATA[ | [[API 2006 | AA. Bibliography#API 06]] | ]]></ac:plain-text-body></ac:structured-macro> | ||
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="b456e582-aaee-4d31-846e-d699d8e5369b"><ac:plain-text-body><![CDATA[ | [[OWASP 2008 | AA. Bibliography#OWASP 08]] | [Log Injection | https://www.owasp.org/index.php/Log_injection] | ]]></ac:plain-text-body></ac:structured-macro> |
...