455 matches found
aero.champ:cargojson (=1.0), africa.absa:inception-application (>=1.1.0 <=1.2.0) +35425 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (>=0.6 <=1.2.12)
ch.qos.logback:logback-classic MAVEN version =0.6, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =0.0.86, =0.0.86, =0.15, =0.15, =0.15, =0.23 and more Source cves: CVE-2023-6378 Source advisory: OSV:GHSA-VMQ6-5M68-F53M...
ai.tock:bot-test (=22.3.2), ai.tock:bot-test-base (=22.3.2) +347 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (>=1.3.0 <=1.3.11)
ch.qos.logback:logback-classic MAVEN version =1.3.0, =1.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ai.tock:bot-test =22.3.2 - ai.tock:bot-test-base =22.3.2 - ai.tock:bot-toolkit =22.3.2 -...
ai.timefold.solver:timefold-solver-examples (>=1.1.0 <=1.4.0), ai.timefold.solver:timefold-solver-spring-boot-starter (=1.4.0) +5870 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (>=1.4.0 <=1.4.11)
ch.qos.logback:logback-classic MAVEN version =1.4.0, =1.1.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =23.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =23.9.1 and more Source cves: CVE-2023-6378 Source advisory: OSV:GHSA-VMQ6-5M68-F53M...
aero.champ:cargojson (=1.0), africa.absa:inception-application (>=1.1.0 <=1.2.0) +35990 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (>=0.2.5 <=1.2.12)
ch.qos.logback:logback-core MAVEN version =0.2.5, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =0.0.86, =0.0.86, =0.0.86, =0.15, =0.15, =0.15, =0.23 and more Source cves: CVE-2023-6378 Source advisory: OSV:GHSA-VMQ6-5M68-F53M...
ai.tock:bot-test (=22.3.2), ai.tock:bot-test-base (=22.3.2) +365 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (>=1.3.0 <=1.3.11)
ch.qos.logback:logback-core MAVEN version =1.3.0, =1.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ai.tock:bot-test =22.3.2 - ai.tock:bot-test-base =22.3.2 - ai.tock:bot-toolkit =22.3.2 -...
ai.timefold.solver:timefold-solver-examples (>=1.1.0 <=1.4.0), ai.timefold.solver:timefold-solver-spring-boot-starter (=1.4.0) +5835 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (>=1.4.0 <=1.4.11)
ch.qos.logback:logback-core MAVEN version =1.4.0, =1.1.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =23.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =23.9.1 and more Source cves: CVE-2023-6378 Source advisory: OSV:GHSA-VMQ6-5M68-F53M...
GHSA-VMQ6-5M68-F53M logback serialization vulnerability
A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...
logback serialization vulnerability
A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...
CVE-2023-6378
A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...
DEBIAN-CVE-2023-6378
A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...
CVE-2023-6378
A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...
Design/Logic Flaw
A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...
CVE-2023-6378
A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...
UBUNTU-CVE-2023-6378
A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...
CVE-2023-6378
CVE-2023-6378 involves a serialization vulnerability in the logback receiver component of logback version 1.4.11 that allows an attacker to mount a Denial-of-Service by sending poisoned data. The published entries consistently describe a DoS impact without other confidentiality or integrity effec...
CVE-2023-6378 Logback "receiver" DOS vulnerability
A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...
CVE-2023-6378 Logback "receiver" DOS vulnerability
A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...
CVE-2023-6378
A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...
logback code issue vulnerability
Quality Open Software Logback is a logging framework for Java applications from Quality Open Software, Switzerland. A security vulnerability exists in logback version 1.4.11, which stems from a denial of service DOS vulnerability in the component logback receiver...
logback serialization vulnerability
A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...