1 matches found
MGASA-2023-0141 Updated davmail packages fix security vulnerability
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1...
9.8CVSS9.7AI score0.81147EPSS
SaveExploits13References3
20