CVE-2019-11642

CVE-2019-11642 is a high-severity log poisoning vulnerability affecting the OneShield Policy (Dragon Core) framework prior to version 5.1.10. Authenticated attackers can inject malicious payloads into log files via headers or form elements, leading to remote code execution through a client-side debugging console if enabled. The CVSS score of 8.8 reflects a network-based attack with low complexity, requiring low privileges, and resulting in high impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.