CVE-2024-12801 - CVE House
Back to Database
Status published Low CVE-2024-12801

SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

Vulnerability Description

Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12  on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attacks involves the modification of DOCTYPE declaration in  XML configuration files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-12801

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • 7asecurity

References

More from QOS.CH Sarl

View All →
CVE-2025-11226
Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino
High 7
CVE-2024-12798
JaninoEventEvaluator vulnerability
Medium 5.9
CVE-2023-6481
Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix
High 7.1
CVE-2023-6378
Logback "receiver" DOS vulnerability
High 7.1

Affected Vendor

QOS.CH Sarl

View all reports →

Affected Software

logback
Vulnerable Versions:
0.1, 1.4.0, 1.3.15, 1.5.13

Timeline

Official Publish: December 19th, 2024
Last Modified: January 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-918

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1213 Data from Information Repositories
Collection
T1005 Data from Local System
Collection
T1046 Network Service Discovery
Discovery