AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-12801

UNKNOWN · CVSS N/A EPSS 0.22%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-12-19 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. It affects Java.

CVE
CVE-2024-12801
Severity
UNKNOWN
CVSS
N/A
EPSS
0.22%
Java

Original NVD Description

Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12  on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attacks involves the modification of DOCTYPE declaration in  XML configuration files.