log-forging

Log Injection: How Attackers Poison Your Logs (and How to Stop Them)

Logs are supposed to be your source of truth during an incident. Log injection lets attackers forge entries, break parsers, and — in the worst cases — trigger code execution from a log line.