Unrated
bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.
CVE-2018-20586
First seen on SecPulse
References
- report en.bitcoin.it