Lucene search
+L

1 matches found

OSV
OSV
added 2023/04/15 7:3 p.m.21 views

MGASA-2023-0141 Updated davmail packages fix security vulnerability

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1...

9.8CVSS9.7AI score0.81147EPSS
SaveExploits13References3
Rows per page
Query Builder