Log injection occurs when an application fails to sanitize untrusted data used for logging.

An attacker can forge log content to prevent an organization from being able to trace back malicious activities.