CVE-2024-12798 CVE-2024-12801 logback-core Expression Language Inject…

…ion, Server-Side Request Forgery vulnerability (#455)
OpenIdentityPlatform · Dec 25, 2024 · fd6b853 · fd6b853
1 parent b2c8bcc
commit fd6b853
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/opendj-embedded/pom.xml b/opendj-embedded/pom.xml
@@ -38,7 +38,7 @@
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-core</artifactId>
-            <version>1.2.13</version>
+            <version>1.5.13</version>
             <exclusions>
                 <exclusion>
                     <artifactId>slf4j-api</artifactId>
@@ -49,7 +49,7 @@
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
-            <version>1.2.13</version>
+            <version>1.5.13</version>
             <exclusions>
                 <exclusion>
                     <artifactId>slf4j-api</artifactId>