CVE-2025-58580

28th percentile - higher than 28% of all known CVEs

An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.

An attacker could poison or falsify logs, hindering incident detection and audit trails. This could conceal actual attacks.

Implement strict input validation on the API endpoint and restrict log entry creation to authorized processes. Monitoring log integrity is also recommended.