Slf4J

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-8088 Mar 20, 16:29 Maven CRITICAL PATCH Act Now

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Oracle Red Hat Enterprise Linux Desktop Enterprise Linux Eus +12

NVD GitHub

CVSS 3.1

9.8

EPSS

15.1%

CVE-2018-8088 Maven

EPSS 15% CVSS 9.8

CRITICAL PATCH Act Now

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Oracle Red Hat +14

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy