Low severity · published Dec 19, 2024
CVE-2024-12801
SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks
2.4
CVSS
0.2%
EPSS
No
On KEV
Description
Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 on the Java platform, allows an attacker to
forge requests by compromising logback configuration files in XML.
The attacks involves the modification of DOCTYPE declaration in XML configuration files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LO
logback · QOS.CH Sarl
0.1 through 1.3.14; 1.4.0 through 1.5.12 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-12801
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-12801
logback.qos.ch
https://logback.qos.ch/news.html#1.3.15
logback.qos.ch
https://logback.qos.ch/news.html#1.5.13
More from logback
2.9
CVE-2026-10532
Logback deserialization whitelist bypass for Proxy objects
2.9
CVE-2026-9828
Logback deserialization whitelist bypass for java.lang and java.util