org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Github GHSA |
GHSA-w77p-8cfg-2x43 | Improper Access Control in SLF4J |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 23 Aug 2024 05:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7 |
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T06:46:12.940Z
Reserved: 2018-03-13T00:00:00
Link: CVE-2018-8088
No data.
Status : Modified
Published: 2018-03-20T16:29:00.547
Modified: 2024-11-21T04:13:14.380
Link: CVE-2018-8088
OpenCVE Enrichment
No data.
Github GHSA