Lucene search

K
cvelistMitreCVELIST:CVE-2022-42004
HistoryOct 02, 2022 - 12:00 a.m.

CVE-2022-42004

2022-10-0200:00:00
mitre
raw.githubusercontent.com
4

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.2%

In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.