In short
- CVE-2023-6481 is a HIGH (CVSS 7.5) vulnerability affecting ch.qos.logback:logback-core, logback (qos).
- Chance of exploitation in the next 30 days (EPSS): 0.68%, higher than 52.5% of all vulnerabilities.
- Fix: update to 1.2.13, 1.3.14, 1.4.14 or later.
| Package | Affected versions | Patched versions |
|---|
| ch.qos.logback:logback-core Maven | ≥ 1.2.12, < 1.2.13≥ 1.3.13, < 1.3.14≥ 1.4.13, < 1.4.14
| 1.2.131.3.141.4.14
|
| logback | = 1.2.12= 1.3.13= 1.4.13
| No fix yet |
Description
A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.
NVD description
A serialization vulnerability in logback receiver component part of
logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service
attack by sending poisoned data.
More vulnerabilities in ch.qos.logback:logback-core
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free