Details
-
Type:
Task
-
Status: Resolved (View Workflow)
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: Meridian-2018.1.29, Meridian-2019.1.20, Meridian-2020.1.9, Meridian-2021.1.1
-
Fix Version/s: Meridian-2018.1.30, Meridian-2019.1.21, Meridian-2020.1.10, Meridian-2021.1.2, 28.0.1
-
Component/s: None
-
Security Level: Default (Default Security Scheme)
-
Labels:None
Description
Our logback version is very old, and while this particular vulnerability probably doesn't affect us, it's worth updating it regardless.
QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.
