Apache Cassandra: Schwachstelle ermöglicht Codeausführung

Summary

Product

Vulnerabilities 1

• Low 2.4
  CVE-2024-12801

  SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

  Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12  on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attacks involves the modific…

  QOS.CH Sarl logback thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  Dec 19, 2024

Revision history

1. 2026-05-12 #8

   Neue Updates von IBM aufgenommen

2. 2026-04-06 #7

   Neue Updates von HITACHI aufgenommen

3. 2026-03-09 #6

   Neue Updates von IBM aufgenommen

4. 2025-11-17 #5

   Neue Updates aufgenommen

5. 2025-10-05 #4

   Neue Updates aufgenommen

6. 2025-07-06 #3

   Neue Updates von NetApp aufgenommen

7. 2025-05-14 #2

   Neue Updates von HITACHI aufgenommen

8. 2025-03-06 #1

   Initiale Fassung

References

• Apache Cassandra Vulnerability Report vom 2025-03-06
  https://issues.apache.org/jira/browse/CASSANDRA-20412
• NIST Vulnerability Database vom 2025-03-06
  https://nvd.nist.gov/vuln/detail/CVE-2024-12801
• Hitachi Vulnerability Information HITACHI-SEC-2025-113 vom 2025-05-15
  https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-113/index.html
• NetApp Security Advisory NTAP-20250704-0001 vom 2025-07-04
  https://security.netapp.com/advisory/NTAP-20250704-0001
• SAS Security Update vom 2025-10-02
  https://support.sas.com/en/security-bulletins/sas-security-update-for-sas-94m9-ts1m9.html
• SolarWinds Platform 2025.4.1 release notes vom 2025-11-18
  https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-4-1_release_notes.htm
• IBM Security Bulletin 7262525 vom 2026-03-10
  https://www.ibm.com/support/pages/node/7262525
• Hitachi Vulnerability Information HITACHI-SEC-2026-115 vom 2026-04-07
  https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-115/index.html
• IBM Security Bulletin 7272628 vom 2026-05-12
  https://www.ibm.com/support/pages/node/7272628