CVE-2018-8088
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.7%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 14.70% probability · 97th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Affected
- qos/slf4j · redhat/jboss enterprise application platform · redhat/virtualization · redhat/virtualization host · redhat/enterprise linux desktop · redhat/enterprise linux eus · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · oracle/goldengate application adapters · oracle/goldengate stream analytics · oracle/utilities framework
- Source
- cve@mitre.org
EPSS 14.7% since 27 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://www.securityfocus.com/bid/103737Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040627Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:0582Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0592Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0627Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0628Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0629Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0630Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1247Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1248Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1249Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1251Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1323Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1447Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1448Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1449Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1450Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1451Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1525Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1575Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2143Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2419Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2420Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2669Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2930Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2413Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:3140Third Party Advisory
- https://github.com/qos-ch/slf4j/commit/d2b27fba88e983f921558da27fc29b5f5d269405Patch, Third Party Advisory
- https://jira.qos.ch/browse/SLF4J-430Issue Tracking, Vendor Advisory
- https://jira.qos.ch/browse/SLF4J-431Issue Tracking, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.