title: Possible log injection
description: Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.
problem types: CWE-117 Improper Output Neutralization for Logs
affected:
{
product: Apache Superset
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 1.3.1, status: affected, version: Apache Superset, versionType: custom
}
workarounds: Upgrade to Apache Superset 1.3.2 or higher