> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Tainted log injection log formatter flask

<AccordionGroup>
  <Accordion title="tainted-log-injection-log-formatter-flask">
    Detected a logger that logs user input without properly neutralizing the output. The log message could contain characters like ` ` and ` ` and cause an attacker to forge log entries or include malicious content into the logs. Use proper input validation and/or output encoding to prevent log entries from being forged.<br />**Likelihood**: LOW<br />**Confidence**: HIGH<br />**CWE**: <br />- CWE-117: Improper Output Neutralization for Logs
    <br />**OWASP**: <br />- A09:2021 - Security Logging and Monitoring Failures
  </Accordion>
</AccordionGroup>