News · via oss-security
CVE-2026-105242: Apache log4net: Request validation failure drops the event in the aspnet-request converter
Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.11 before 3.5.0 - Apache log4net…