GitHub Advisoryadvisory · Maven

GHSA-gm62-rw4g-vrc4 Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

HIGH Published 2023-12-04 Modified 2023-12-08 Official page ↗
Aliases
CVE-2023-6481
Ecosystem
Maven
Packages
ch.qos.logback:logback-core
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Reviewed
2023-12-08

Affected packages

• Maven ch.qos.logback:logback-core: >= 1.4.13, < 1.4.14 → fixed in 1.4.14 • Maven ch.qos.logback:logback-core: >= 1.3.13, < 1.3.14 → fixed in 1.3.14 • Maven ch.qos.logback:logback-core: >= 1.2.12, < 1.2.13 → fixed in 1.2.13

Description

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

Related

Alias · CVE (1)

  • CVE-2023-6481 A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a… vulnerability

References