io.root.ch.qos.logback:logback-core vulnerabilities (Root)
7 vulnerabilities.
-
io.root.ch.qos.logback:logback-coreRoot Malicious logback.xml configuration file allows instantiation of arbitrary classes 1.8 Low -
io.root.ch.qos.logback:logback-coreRoot Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino 7.0 High -
io.root.ch.qos.logback:logback-coreRoot SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks 2.4 Low -
io.root.ch.qos.logback:logback-coreRoot JaninoEventEvaluator vulnerability 5.9 Medium -
io.root.ch.qos.logback:logback-coreRoot Logback "receiver" DOS vulnerability 7.1 High -
io.root.ch.qos.logback:logback-coreRoot RCE from attacker with configuration edit priviledges through JNDI lookup 6.6 Medium -
io.root.ch.qos.logback:logback-coreRoot QOS.ch Logback vulnerable to Deserialization of Untrusted Data 9.8 Critical