Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-42004
HistoryOct 02, 2022 - 12:00 a.m.

CVE-2022-42004

2022-10-0200:00:00
ubuntu.com
ubuntu.com
20

0.003 Low

EPSS

Percentile

66.1%

In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur
because of a lack of a check in BeanDeserializer._deserializeFromArray to
prevent use of deeply nested arrays. An application is vulnerable only with
certain customized choices for deserialization.