Логотип exploitDog
bind: "CVE-2025-54813"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2025-54813"

Количество 7

Количество 7

ubuntu логотип

CVE-2025-54813

3 месяца назад

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using JSONLayout, not all payload bytes are properly escaped. If an attacker-supplied message contains certain non-printable characters, these will be passed along in the message and written out as part of the JSON message. This may prevent applications that consume these logs from correctly interpreting the information within them. This issue affects Apache Log4cxx: before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2025-54813

3 месяца назад

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using JSONLayout, not all payload bytes are properly escaped. If an attacker-supplied message contains certain non-printable characters, these will be passed along in the message and written out as part of the JSON message. This may prevent applications that consume these logs from correctly interpreting the information within them. This issue affects Apache Log4cxx: before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2025-54813

3 месяца назад

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using JSONLayout, not all payload bytes are properly escaped. If an attacker-supplied message contains certain non-printable characters, these will be passed along in the message and written out as part of the JSON message. This may prevent applications that consume these logs from correctly interpreting the information within them. This issue affects Apache Log4cxx: before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2025-54813

3 месяца назад

Improper Output Neutralization for Logs vulnerability in Apache Log4cx ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-68p3-h5c2-5hcr

3 месяца назад

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using JSONLayout, not all payload bytes are properly escaped. If an attacker-supplied message contains certain non-printable characters, these will be passed along in the message and written out as part of the JSON message. This may prevent applications that consume these logs from correctly interpreting the information within them. This issue affects Apache Log4cxx: before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2025-13812

3 месяца назад

Уязвимость фреймворка для логирования на C++ Log4cxx, связанная с неправильной обработкой выходных данных для журналов регистрации, позволяющая нарушителю получить несанкционированный доступ к конфиденциальным данным

CVSS3: 7.5
EPSS: Низкий
redos логотип

ROS-20251105-03

26 дней назад

Множественные уязвимости log4cxx

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-54813

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using JSONLayout, not all payload bytes are properly escaped. If an attacker-supplied message contains certain non-printable characters, these will be passed along in the message and written out as part of the JSON message. This may prevent applications that consume these logs from correctly interpreting the information within them. This issue affects Apache Log4cxx: before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

CVSS3: 7.5
0%
Низкий
3 месяца назад
redhat логотип
CVE-2025-54813

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using JSONLayout, not all payload bytes are properly escaped. If an attacker-supplied message contains certain non-printable characters, these will be passed along in the message and written out as part of the JSON message. This may prevent applications that consume these logs from correctly interpreting the information within them. This issue affects Apache Log4cxx: before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

CVSS3: 5.3
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-54813

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using JSONLayout, not all payload bytes are properly escaped. If an attacker-supplied message contains certain non-printable characters, these will be passed along in the message and written out as part of the JSON message. This may prevent applications that consume these logs from correctly interpreting the information within them. This issue affects Apache Log4cxx: before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

CVSS3: 7.5
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-54813

Improper Output Neutralization for Logs vulnerability in Apache Log4cx ...

CVSS3: 7.5
0%
Низкий
3 месяца назад
github логотип
GHSA-68p3-h5c2-5hcr

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using JSONLayout, not all payload bytes are properly escaped. If an attacker-supplied message contains certain non-printable characters, these will be passed along in the message and written out as part of the JSON message. This may prevent applications that consume these logs from correctly interpreting the information within them. This issue affects Apache Log4cxx: before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue.

CVSS3: 7.5
0%
Низкий
3 месяца назад
fstec логотип
BDU:2025-13812

Уязвимость фреймворка для логирования на C++ Log4cxx, связанная с неправильной обработкой выходных данных для журналов регистрации, позволяющая нарушителю получить несанкционированный доступ к конфиденциальным данным

CVSS3: 7.5
0%
Низкий
3 месяца назад
redos логотип
ROS-20251105-03

Множественные уязвимости log4cxx

CVSS3: 8.8
26 дней назад

Уязвимостей на страницу