Lucene search
+L

1 matches found

OSV
OSV
added 2019/02/14 8:38 a.m.10 views

MGASA-2019-0079 Updated logback packages fix security vulnerability

It was found that logback is vulnerable to a deserialization issue. Logback can be configured to allow remote logging through SocketServer/ServerSocketReceiver interfaces that can accept untrusted serialized data. Authenticated attackers on the adjacent network can leverage this vulnerability to...

9.8CVSS9.7AI score0.07501EPSS
SaveExploits0References3
Rows per page
Query Builder