title: Apache Unomi log injection
description: Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.
problem types: CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection')
affected:
{
product: Apache Unomi
vendor: Apache Software Foundation
versions:
lessThan: 1.5.5, status: affected, version: Apache Unomi, versionType: custom
}