Home / Vulnerability Database / JavaScript : Logging into system output
JavaScript
JavaScript : Logging into system output
Classification
OWASP Top 10 2017
CWE
Overview
The application uses unstructured logging (error messages are outputted to standard streams). Instead, it is recommended to use a structured logging.
Structured logging using specially designed structures can generate a log with the levels, time stamps, and standard formatting. Using standard streams to output error messages while there is a mechanism of structured logging in a program can lead to absence of critical information in the log.
Outputting error messages to standard streams is only permissible on the early stages of development.
References
LOW
DerScanner Severity Score
Do you want to fix JavaScript : Logging into system output in your application?
See also
JavaScript
JavaScript : Null salt
JavaScript
JavaScript : Empty encryption key
JavaScript