René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Java: CWE-532 sensitive info logging","articleBody":"## CVE ID(s)\r\n\r\n*List the CVE ID(s) associated with this vulnerability. GitHub will automatically link CVE IDs to the [GitHub Advisory Database](https://github.com/advisories).*\r\nCVE-2019-10212 (not reported by me)\r\n\r\nThere are many other examples of [this category](https://www.cvedetails.com/vulnerability-list.php?vendor_id=0\u0026product_id=0\u0026version_id=0\u0026page=1\u0026hasexp=0\u0026opdos=0\u0026opec=0\u0026opov=0\u0026opcsrf=0\u0026opgpriv=0\u0026opsqli=0\u0026opxss=0\u0026opdirt=0\u0026opmemc=0\u0026ophttprs=0\u0026opbyp=0\u0026opfileinc=0\u0026opginf=0\u0026cvssscoremin=0\u0026cvssscoremax=0\u0026year=0\u0026month=0\u0026cweid=532\u0026order=1\u0026trc=133\u0026sha=7aafd96afe25a46fb2e44e7eb3f74aa56c235dbb) in the CVE database.\r\n\r\nPR: \r\n[Semmle/ql#3090](https://github.com/Semmle/ql/pull/3090)\r\n[Semmle/ql#3487](https://github.com/Semmle/ql/pull/3487)\r\n\r\n## Report\r\n\r\n*Describe the vulnerability. Provide any information you think will help GitHub assess the impact your query has on the open source community.*\r\n\r\nInformation written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information. Third-party logging utilities like Log4J and SLF4J are widely used in Java projects. When sensitive information are written to logs without properly set logging levels, it is accessible to potential attackers who gains access to the\r\nfile storage.\r\n\r\n\r\n- [x] Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc). *We would love to have you spread the word about the good work you are doing*\r\n","author":{"url":"https://github.com/luchua-bc","@type":"Person","name":"luchua-bc"},"datePublished":"2020-03-18T23:54:13.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":18},"url":"https://github.com/51/securitylab/issues/51"}