Beveiligingsadvies

CVE-2024-12801

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-12-19 16:11:50

Laatst bijgewerkt 2025-01-03 13:40:41

Toegewezen door NCSC.ch

CVSS-score 2.4

Status PUBLISHED

Beschrijving

Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attacks involves the modification of DOCTYPE declaration in XML configuration files.

← Alle CVE's bekijken Bekijk op cve.org ↗