Lucene search

K
cvelistMitreCVELIST:CVE-2020-24750
HistorySep 17, 2020 - 6:39 p.m.

CVE-2020-24750

2020-09-1718:39:40
mitre
www.cve.org
7
fasterxml jackson-databind mishandles
serialization gadgets
typing
com.pastdev.httpcomponents.configuration.jndiconfiguration

AI Score

8.7

Confidence

High

EPSS

0.007

Percentile

80.7%

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.