From 772d799eee8ded0ca77504a21e173003f5e2fbd1 Mon Sep 17 00:00:00 2001 From: Marcus Fihlon Date: Tue, 28 Dec 2021 13:26:53 +0100 Subject: [PATCH] :lock: Fix potential logback security vulnerabilities **CVE-2021-42550** *In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.* --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 09aaa8fa..901fcb8a 100644 --- a/pom.xml +++ b/pom.xml @@ -456,7 +456,7 @@ ch.qos.logback logback-core - 1.2.0 + 1.2.10 org.slf4j