CVE-2024-12798
1 advisory.
Maven/ch.qos.logback:logback-core CVE-2024-12798: medium
QOS.CH logback-core Expression Language Injection vulnerability
Action: Upgrade ch.qos.logback:logback-core to 1.3.15 (1.3.x) or 1.5.13 (1.5.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.5.13 | - |
| 0 | 1.3.15 | - |
Fixed versions
| 1.5.13 | 1.3.15 |
Sources
- osv: GHSA-pr98-23f8-jwxv
- https://nvd.nist.gov/vuln/detail/CVE-2024-12798
- https://github.com/qos-ch/logback/commit/2cb6d520df7592ef1c3a198f1b5df3c10c93e183
- https://github.com/qos-ch/logback
- https://logback.qos.ch/news.html#1.3.15
- https://logback.qos.ch/news.html#1.5.13
CVE-2024-12798 · published · modified · JSON