Search CVE reports

Toggle filters

1 – 6 of 6 results

CVE-2024-12801

Medium priority
Needs evaluation

Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12  on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The...

1 affected package

logback

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
logback Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-12798

Medium priority
Needs evaluation

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows attacker to execute arbitrary code by compromising an existing ...

1 affected package

logback

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
logback Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-6481

Medium priority
Needs evaluation

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

1 affected package

logback

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
logback Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-6378

Medium priority
Needs evaluation

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

1 affected package

logback

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
logback Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2021-42550

Medium priority
Needs evaluation

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

1 affected package

logback

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
logback Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2017-5929

Medium priority
Vulnerable

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

1 affected package

logback

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
logback Not affected Not affected Not affected Not affected
Show less packages