CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2023-6481
High (7.5) in qos logback. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in ch.qos.logback:logback-core 1.2.13, 1.3.14, 1.4.14.
A serialization vulnerability in logback receiver component part of
logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service
attack by sending poisoned data.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qos:logback
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-gm62-rw4g-vrc4 | Maven | ch.qos.logback:logback-core | >=1.4.13 <1.4.14 | 1.4.14 |
| GHSA-gm62-rw4g-vrc4 | Maven | ch.qos.logback:logback-core | >=1.3.13 <1.3.14 | 1.3.14 |
| GHSA-gm62-rw4g-vrc4 | Maven | ch.qos.logback:logback-core | >=1.2.12 <1.2.13 | 1.2.13 |