CVE-2025-10217
Description
A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject crafted data in logfile for potentially carrying out further malicious attacks. Performance logging is typically enabled for troubleshooting purposes while resolving application performance related issues.
Weakness Type (CWE)
References
Frequently Asked Questions
What is CVE-2025-10217? +
How do I check if I'm vulnerable to CVE-2025-10217? +
Related Vulnerabilities
wire-ios is an iOS client for the Wire secure messaging application. From Wire iOS 3.111.1 to before 3.124.1, messages that …
NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable …
Xibo is an Open Source Digital Signage platform with a web content management system and Windows display player software. In …
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not …
CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/_bulk endpoint. This endpoint accepts …
Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An …