DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2024-12801

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-12801

CGA ID

CGA-r27c-w3r8-wwg9

Severity

Unknown

Summary

QOS.CH logback-core Server-Side Request Forgery vulnerability

Description

Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 1.5.12 on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML.

The attacks involves the modification of DOCTYPE declaration in  XML configuration files.

References

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images