Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2021/12/16 12:0 a.m.31 views

CVE-2021-42550 RCE from attacker with configuration edit priviledges through JNDI lookup

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...

6.6CVSS7.5AI score0.04439EPSS
SaveExploits1References7
Rows per page
Query Builder