QOS Logback 1.4.13
Approved changes feed: RSS · Atom
cpe:2.3:a:qos:logback:1.4.13:*:*:*:*:*:*:*
part: a version: 1.4.13 update: *
| Vendor | Qos (b470eab1-b3a2-55fb-bed6-bdb3ccc9249e) |
|---|---|
| Product | Logback (6ca9c952-a24e-5dc9-9fd2-77d9331df6b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/logback |
purl2cpe | 2026-06-01 10:15:45.450272 |
pkg:deb/ubuntu/logback |
purl2cpe | 2026-06-01 10:15:45.450274 |
pkg:github/qos-ch/logback |
purl2cpe | 2026-06-01 10:15:45.450275 |
pkg:maven/ch.qos.logback/logback-parent |
purl2cpe | 2026-06-01 10:15:45.450277 |
pkg:rpm/fedora/logback |
purl2cpe | 2026-06-01 10:15:45.450279 |
pkg:rpm/opensuse/logback |
purl2cpe | 2026-06-01 10:15:45.450281 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6481 |
vulnerable | 2026-06-08 06:19:47.456222 |
Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix
HIGH (7.1)
A serialization vulnerability in logback receiver component part of
logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service
attack by sending poisoned data.
Published: 2023-12-04T08:35:44.396Z
Updated: 2024-08-02T08:28:21.829Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.