ch.qos.logback:logback-access (0.9.12), ch.qos.logback:logback-classic (0.9.12) +1 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.12)

ch.qos.logback:logback-core MAVEN version 0.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.12 - ch.qos.logback:logback-classic 0.9.12 -...

ch.qos.logback:log4j-bridge (0.9.4), ch.qos.logback:logback-examples (0.9.4) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.4)

ch.qos.logback:logback-classic MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.4 - ch.qos.logback:logback-examples 0.9.4 Source cves: CVE-2023-637...

ch.qos.logback:log4j-bridge (0.9.2), ch.qos.logback:logback-access (0.9.2) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.2)

ch.qos.logback:logback-core MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.2 - ch.qos.logback:logback-access 0.9.2 - ch.qos.logback:logback-classic...

ch.qos.logback:logback-access (0.9.22), ch.qos.logback:logback-classic (0.9.22) +1 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.22)

ch.qos.logback:logback-core MAVEN version 0.9.22 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.22 - ch.qos.logback:logback-classic 0.9.22 -...

ch.qos.logback:log4j-bridge (0.9.2), ch.qos.logback:logback-examples (0.9.2) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.2)

ch.qos.logback:logback-classic MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.2 - ch.qos.logback:logback-examples 0.9.2 Source cves: CVE-2023-637...

ch.qos.logback:log4j-bridge (0.7), ch.qos.logback:logback-access (0.7) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.7)

ch.qos.logback:logback-core MAVEN version 0.7 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.7 - ch.qos.logback:logback-access 0.7 - ch.qos.logback:logback-classic 0.7 -...

ch.qos.logback:log4j-bridge (0.8.1), ch.qos.logback:logback-examples (0.8.1) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.8.1)

ch.qos.logback:logback-classic MAVEN version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.8.1 - ch.qos.logback:logback-examples 0.8.1 Source cves: CVE-2023-637...

ch.qos.logback:logback-access (0.6), ch.qos.logback:logback-classic (0.6) +1 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.6)

ch.qos.logback:logback-core MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.6 - ch.qos.logback:logback-classic 0.6 - ch.qos.logback:logback-examples 0....

ch.qos.logback:logback-access (0.9.16), ch.qos.logback:logback-classic (0.9.16) +12 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.16)

ch.qos.logback:logback-core MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.16 - ch.qos.logback:logback-classic 0.9.16 -...

ch.hortis.sonar:sonar-commons (0.2), ch.hortis.sonar:sonar-maven-plugin (0.2) +4 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.5)

ch.qos.logback:logback-core MAVEN version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.hortis.sonar:sonar-commons 0.2 - ch.hortis.sonar:sonar-maven-plugin 0.2 - ch.qos.logback:log4j-bridge...

ch.qos.logback:logback-examples (0.9.12) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.12)

ch.qos.logback:logback-classic MAVEN version 0.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.12 Source cves: CVE-2023-6378 Source advisory:...

ch.qos.logback:log4j-bridge (0.9.1), ch.qos.logback:logback-examples (0.9.1) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.1)

ch.qos.logback:logback-classic MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.1 - ch.qos.logback:logback-examples 0.9.1 Source cves: CVE-2023-637...

ch.qos.logback:logback-access (0.9.11), ch.qos.logback:logback-classic (0.9.11) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.11)

ch.qos.logback:logback-core MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.11 - ch.qos.logback:logback-classic 0.9.11 -...

ch.qos.logback:logback-examples (0.9.22) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.22)

ch.qos.logback:logback-classic MAVEN version 0.9.22 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.22 Source cves: CVE-2023-6378 Source advisory:...

ch.qos.logback:log4j-bridge (0.9.6), ch.qos.logback:logback-examples (0.9.6) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.6)

ch.qos.logback:logback-classic MAVEN version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.6 - ch.qos.logback:logback-examples 0.9.6 -...

ch.qos.logback:logback-examples (0.6) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.6)

ch.qos.logback:logback-classic MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.6 Source cves: CVE-2023-6378 Source advisory: OSV:GHSA-VMQ6-5M68-F5...

ch.qos.logback:log4j-bridge (0.9.1), ch.qos.logback:logback-access (0.9.1) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.1)

ch.qos.logback:logback-core MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.1 - ch.qos.logback:logback-access 0.9.1 - ch.qos.logback:logback-classic...

ch.qos.logback:logback-access (0.9.26), ch.qos.logback:logback-classic (0.9.26) +126 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.26)

ch.qos.logback:logback-core MAVEN version 0.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.26 - ch.qos.logback:logback-classic 0.9.26 -...

Duplicate Advisory: Apache Superset - Elevation of Privilege

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f678-j579-4xf5. This link is maintained to preserve external references. Original Description Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using th...

CVE-2023-40610

Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection that allows access to both the examples schema and Apache Superset's metadata database, an attacker using a specially crafted CTE SQL stateme...