| タイトル | code-projects rental-management-system 2.0 CRLF Injection |
|---|
| 説明 | In Transaction.java, user-controlled input (for example: customer name, location or contact) is written directly into the transaction log file without any sanitization. If the input contains CR (\r) or LF (\n) characters, an attacker can inject additional lines into the log (a CRLF injection). This allows an attacker to tamper with audit records, insert forged entries, confuse parsers that consume the log, or—when exported to CSV/Excel—perform formula injection that may lead to client-side risks.
Root cause: the code concatenates and prints raw user strings (e.g. `outFile.println("Full Name: " + aCustomer.getFullName());`) without removing or escaping control characters.
Impact: injected newlines can split or fake log records (breaking integrity and trust of audit data), can break automated parsing or reporting pipelines, and can be weaponized when data is exported (CSV/Excel) to trigger formula execution on the client side. The correct mitigation is to sanitize or escape input before writing, prefer structured logging (JSON) or a database for records, and apply CSV/Excel-specific escaping for exports.
|
|---|
| ソース | ⚠️ https://github.com/asd1238525/cve/blob/main/CRLF.md |
|---|
| ユーザー | fanti (UID 93062) |
|---|
| 送信 | 2025年11月28日 17:39 (10 月 ago) |
|---|
| モデレーション | 2025年12月11日 10:16 (13 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 335872 [code-projects Rental Management System 2.0 Log Transaction.java 特権昇格] |
|---|
| ポイント | 20 |
|---|