Logback "receiver" DOS vulnerability

CVE-2023-6378

What is CVE-2023-6378?

Logback version 1.4.11 contains a serialization vulnerability in its receiver component, which can be exploited by an attacker to execute a Denial-of-Service attack. By sending specially crafted malicious data to the receiver, an attacker may disrupt the service, potentially causing significant downtime and disruption. Organizations using affected versions should prioritize patching to mitigate the risks associated with this vulnerability.

References