| Package | Affected versions | Patched versions |
|---|---|---|
| ch.qos.logback:logback-core | ≥ 1.2.12, < 1.2.13≥ 1.3.13, < 1.3.14≥ 1.4.13, < 1.4.14 | 1.2.131.3.141.4.14 |
| logback | = 1.2.12= 1.3.13= 1.4.13 |
A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free