Details
-
Task
-
Resolution: Fixed
-
Major
-
13.9-rc-1
-
None
Description
See https://logback.qos.ch/news.html
• To prevent XML eXternal Entity injection (XXE) attacks, Joran no longer reads external entities passed in XML files. This fixes LOGBACK-1465 as reported by Shuibo Ye.