Read the docs

Serilog-contrib

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Serilog-contrib records in CISA KEV

No Serilog-contrib vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 35

Serilog before v2.1.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify their IP addresses by specifying an arbitrary IP as a value of X-Forwarded-For or Client-Ip headers wh…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00322 Published 2024-08-29 Fixed in 2.1.0 CWE-79
Open these records in search →