CVE-2023-6481

Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

Description

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

Patch Available

Fix available through Seal Security.  
No upgrade required, protect your application instantly.

Fix without upgrading

Score

Severity

Ecosystem

Java

Publish Date

December 4, 2023

Modified Date

December 8, 2023

Score Vector

Affected Versions