Skip to content
OpenAdvisories

Package · Debian

logback

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-104721

    Logback: Incomplete protection against CVE-2026-19880

    Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who in…

    QOS.CH Sarl Logback-classic logback logback Debian Ubuntu
  • Medium 6.3
    CVE-2026-19880

    Incomplete protection against CVE-2025-11226

    Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who in…

    QOS.CH Sarl Logback-classic logback logback Debian Ubuntu
  • Medium 5.9
    CVE-2024-12798

    JaninoEventEvaluator vulnerability

    ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an …

    QOS.CH Sarl Logback-core logback logback Debian Ubuntu Maven
  • Medium 6.6
    CVE-2021-42550

    RCE from attacker with configuration edit priviledges through JNDI lookup

    In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

    QOS.ch logback logback logback Debian Ubuntu Maven