CyberSecBulletin

Accesslog vulnerabilities

We track 1 vulnerability in Accesslog products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 17, 2022.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Accesslog vulnerabilities

  • 9.8 Critical severity

    accesslog: Improper Control of Generation of Code

    CVE-2022-25760AccesslogEPSS 1.64%

    All versions of package accesslog are vulnerable to Arbitrary Code Injection due to the usage of the Function constructor without input sanitization. If (attacker-controlled) user input is given to the format option of the package's exported constructor functi