What is CVE-2021-43410?

CVE-2021-43410 is a medium-severity vulnerability in Apache Airavata Django Portal, classified under Improper Output Neutralization for Logs. CVSS score: 5.3/10. Published 2021-12-09.

How severe is CVE-2021-43410?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Apache Airavata Django Portal

CVE-2021-43410

Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged without first being escaped. Versions affected: master branch before commit 3c5d8c7 [1] of airavata-django-portal [1] https://github.com/apache/airavata-django-portal/commit/3c5d8c72bfc3eb0af8693a655a5d60f9273f8170

Published 2021-12-09 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

EPSS exploit prediction

EPSS: 0.024 (83.4th percentile), scored 2026-10-01.

Low probability of exploitation in the next 30 days, but still tracked. 83rd percentile — 83.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.024 · newest: 0.024 · change: 0.000

Affected products

Apache Airavata Django Portal
Apache Software Foundation Airavata Django Portal — versions master branch

Weakness classification (CWE)

References

lists.apache.org/thread/q64h16ofdxk29soz3jj561nysnzcrl31 (Mailing List, Vendor Advisory)

Frequently asked questions

What is CVE-2021-43410?: CVE-2021-43410 is a medium-severity vulnerability in Apache Airavata Django Portal, classified under Improper Output Neutralization for Logs. CVSS score: 5.3/10. Published 2021-12-09.
How severe is CVE-2021-43410?: Medium severity. CVSS v3 base score is 5.3 out of 10.