THREAT
Importance
What is Log Injection?
A vulnerability occurring when untrusted user input is written directly into system logs without proper validation or sanitization. Attackers exploit this to forge fake log entries, mislead incident responders, or exploit vulnerabilities in log analysis software via malicious payloads. Defenses include input sanitization, encoding output, and enforcing strict delimiter controls.