| Package | Affected versions | Patched versions |
|---|---|---|
| ch.qos.logback:logback-classic | ≥ 1.3.0, < 1.3.12≥ 1.4.0, < 1.4.12< 1.2.13 | 1.3.121.4.121.2.13 |
| ch.qos.logback:logback-core | ≥ 1.3.0, < 1.3.12≥ 1.4.0, < 1.4.12< 1.2.13 | 1.3.121.4.121.2.13 |
| logback | ≥ 1.2.0, < 1.2.13≥ 1.3.0, < 1.3.12≥ 1.4.0, < 1.4.12 | 1.2.131.3.121.4.12 |
A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.
This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free