[Logback] CVE-2021-42550(LOBACK-1591) 대응방법

log4Shell 사태로 로깅 프레임워크를 logback으로 변경했었는데, logback에서도 새로운 취약점이 발견되었다. 나중에 시간이 되면 더 자세히 알아봐야겠다. Logback 공식 사이트 대응방법 https://logback.qos.ch/news.html 16th of December, 2021, Release of version 1.2.9 We note that the vulnerability mentioned in CVE-2021-42550 requires write access to logback's configuration file as a prerequisite. Please understand that log4Shell and CVE-2021-42550 are of different severity levels. In response to CVE-2021-42550 (aka LOGBACK-1591) we have decided to make the following...

원문링크 : [Logback] CVE-2021-42550(LOBACK-1591) 대응방법