Description

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data.

Remediation

References

CVE-2018-8088

Related Vulnerabilities

WordPress Plugin Downloads Manager 'upload.php' Arbitrary File Upload (0.2)

WordPress Plugin Malware Scanner Unspecified Vulnerability (4.7.3)

ownCloud Improper Input Validation Vulnerability (CVE-2014-2585)

WordPress Plugin AI ChatBot Directory Traversal (4.9.2)

Oracle Database Server CVE-2014-6560 Vulnerability (CVE-2014-6560)

Severity

Critical

Classification

CVE-2018-8088 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities