Lucene search

Deserialization of untrusted data in Jackson Databind

🗓️ 18 Jun 2020 14:46:44Reported by GitHub Advisory DatabaseType

Deserialization vulnerability in Jackson Databind 2.

Reporter	Title	Published	Views	Family All 66
OSV	CVE-2020-14060	14 Jun 202021:15	–	osv
OSV	Deserialization of untrusted data in Jackson Databind	18 Jun 202014:44	–	osv
OSV	jackson-databind - security update	1 Jul 202000:00	–	osv
OSV	Red Hat Bug Fix Advisory: Satellite 6.7.2 Async Bug Fix Update	13 Sep 202422:40	–	osv
OSV	Red Hat Bug Fix Advisory: Satellite 6.6.3 Async Bug Fix Update	13 Sep 202422:39	–	osv
OSV	jackson-databind vulnerabilities	15 Mar 202121:47	–	osv
NVD	CVE-2020-14060	14 Jun 202021:15	–	nvd
UbuntuCve	CVE-2020-14060	14 Jun 202000:00	–	ubuntucve
CVE	CVE-2020-14060	14 Jun 202021:15	–	cve
Veracode	Remote Code Execution	15 Jun 202005:12	–	veracode

Vulners

Node

com.fasterxml.jackson.core jackson-databindRange2.9.0–2.9.10.4

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-14060
github	www.github.com/FasterXML/jackson-databind/issues/2688
github	www.github.com/FasterXML/jackson-databind/commit/d1c67a0396e84c08d0558fbb843b5bd1f26e1921
medium	www.medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
snyk	www.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314
lists	www.lists.debian.org/debian-lts-announce/2020/07/msg00001.html
oracle	www.oracle.com/security-alerts/cpuApr2021.html
oracle	www.oracle.com/security-alerts/cpujan2021.html
oracle	www.oracle.com/security-alerts/cpuoct2020.html
oracle	www.oracle.com//security-alerts/cpujul2021.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Jun 2020 14:44Current

3.2Low risk

Vulners AI Score3.2

CVSS26.8

CVSS38.1

EPSS0.032

CWE-502