Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"=" not escaped when the CEF message constructed #26

Open
ArmsSec opened this issue May 15, 2024 · 0 comments
Open

"=" not escaped when the CEF message constructed #26

ArmsSec opened this issue May 15, 2024 · 0 comments

Comments

@ArmsSec
Copy link

ArmsSec commented May 15, 2024

the __sanitize function in cef.py is missing the escape of the "=" character.
The CEF message will not get parsed correctly if there are values that will include "=" since it will treat that as a new set of key-value pair.
this should be included in the code:
value = value.replace('=', '=')
As an example if the logs include the URI requested by the user, that usually have "=" sign, the message will not get parsed correctly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant