NASK - PIB BotSense Incorrect String Encoding Vulnerability Allowing Field Separator Injection
Vulnerability
A vulnerability in NASK - PIB BotSense prior to version 2.8.0 allows for incorrect string encoding, which can lead to the injection of additional field separator characters or values into some fields of the generated event. This injected data can be logged in the 'extraData' field, potentially disrupting data processing or analysis.
Impact
Exploitation of this vulnerability could result in improper data handling, with injected field separators or values potentially causing log parsing issues or data corruption.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.4remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
