CVE Catalog

CVE-2017-5929

Critical
Published: Translated: NVD NIST

Summary

QOS.ch Logback versions before 1.2.0 have a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and potential takeover of the application.

Recommendation

It is recommended to upgrade Logback to version 1.2.0 or later to mitigate this vulnerability.

Original NVD description (English source)

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS