Lucene search

K
cvelistMitreCVELIST:CVE-2018-12022
HistoryMar 17, 2019 - 6:14 p.m.

CVE-2018-12022

2019-03-1718:14:21
mitre
www.cve.org

8.6 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%

An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.

References

8.6 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%