CVE-2018-8088
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 15%
exploitation probability
15%top 3% of all CVEs
observed exploitation
nono source reports it
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.
Affected products
n/a · n/aReferences
https://access.redhat.com/errata/RHSA-2018:0582https://access.redhat.com/errata/RHSA-2018:0592https://access.redhat.com/errata/RHSA-2018:0627https://access.redhat.com/errata/RHSA-2018:0628https://access.redhat.com/errata/RHSA-2018:0629https://access.redhat.com/errata/RHSA-2018:0630https://access.redhat.com/errata/RHSA-2018:1247https://access.redhat.com/errata/RHSA-2018:1248https://access.redhat.com/errata/RHSA-2018:1249https://access.redhat.com/errata/RHSA-2018:1251https://access.redhat.com/errata/RHSA-2018:1323https://access.redhat.com/errata/RHSA-2018:1447