Vulnerabilidades do QOS.CH Sarl Logback-classic
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam QOS.CH Sarl Logback-classic: 2 registro(s), com versões afetadas e correções.
CVE-2026-104721
Média · 6.3
CWE-22 02/10/2026
Logback: Incomplete protection against CVE-2026-19880
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an
MDC-based discriminator value flows unsanitized into a nested
FileAppender path, letting an attacker who influences that MDC value
(e.g. via an HTTP header)
create and append log files outside the intended directory.
This issue affects Logback-classic: from 0.9.14 through 1.6.4. This vulnerability is similar to CVE-2026-19880 but involves other attack techniques.
CVE-2026-19880
Média · 6.3
CWE-22 14/08/2026
Incomplete protection against CVE-2025-11226
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an
MDC-based discriminator value flows unsanitized into a nested
FileAppender path, letting an attacker who influences that MDC value
(e.g. via an HTTP header)
create and append log files outside the intended directory.
This issue affects Logback-classic: from 0.9.14 through 1.6.2.