Re:Peeking through logs
by remram on Friday November 05, 2021 @09:43AM
(#29119102)
> some data leaked back to places where they weren't meant to arrive. Including back to the attacker.
I'm curious how that can happen. They say no file was altered, so it's not a case of the logging system overwriting a file. How could information leak back out of the logging system, and back through the application through the logging functions into user-facing responses? Was the application extracting logs to present to the user for some reason?
I'm curious how that can happen. They say no file was altered, so it's not a case of the logging system overwriting a file. How could information leak back out of the logging system, and back through the application through the logging functions into user-facing responses? Was the application extracting logs to present to the user for some reason?