CVE-2025-54812: Apache Log4cxx: Improper HTML escaping in HTMLLayout
oss-sec: CVE-2025-54812: Apache Log4cxx: Improper HTML escaping in HTMLLayout
Posted by Piotr Karwasz on Aug 22 Severity: low
Affected versions:
- Apache Log4cxx before 1.5.0
Description:
Improper Output Neutralization for Logs vulnerability in Apache Log4cxx.
When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file.
If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript
in order to hide information from logs or steal data from the user.
In order to...
seclists.org
August 22, 2025 at 6:48 PM
CVE-2025-54812: Apache Log4cxx: Improper HTML escaping in HTMLLayout
“マージンやパディングでもう悩まない、モジュール式WebデザインにおけるHTMLとCSSの新しい実装方法 | コリス” http://htn.to/ygjLKQ #html #css #htmllayout #htmlcoding #lego
htn.to
htn.to
htn.to
May 27, 2026 at 6:42 AM
“マージンやパディングでもう悩まない、モジュール式WebデザインにおけるHTMLとCSSの新しい実装方法 | コリス” http://htn.to/ygjLKQ #html #css #htmllayout #htmlcoding #lego