Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-1774

Logs manipulation in BotSense

Description

Incorrect string encoding vulnerability in NASK - PIB BotSense allows injection of an additional field separator character or value in the content of some fields of the generated event. A field with additional field separator characters or values can be included in the "extraData" field.This issue affects BotSense in versions before 2.8.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NASK - PIB BotSense

Default version status: unaffected

  • 0 to < 2.8.0affected

References