Lucene search

Unsafe Deserialization in jackson-databind

🗓️ 09 Dec 2021 19:26:16Reported by GitHub Advisory DatabaseType

Unsafe Deserialization in jackson-databin

Reporter	Title	Published	Views	Family All 55
RedhatCVE	CVE-2020-36184	7 Jan 202120:14	–	redhatcve
Debian CVE	CVE-2020-36184	6 Jan 202123:15	–	debiancve
Atlassian	Injection com.fasterxml.jackson.core:jackson-databind Dependency in Crowd Data Center and Server	9 Apr 202401:53	–	atlassian
UbuntuCve	CVE-2020-36184	6 Jan 202100:00	–	ubuntucve
Prion	Design/Logic Flaw	6 Jan 202123:15	–	prion
Veracode	Arbitrary Code Execution	8 Jan 202106:11	–	veracode
Cvelist	CVE-2020-36184	6 Jan 202122:30	–	cvelist
GithubExploit	Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind	11 Jan 202106:22	–	githubexploit
OSV	Unsafe Deserialization in jackson-databind	9 Dec 202119:16	–	osv
OSV	CVE-2020-36184	6 Jan 202123:15	–	osv

Vulners

Node

com.fasterxml.jackson.core jackson-databindRange2.0.0–2.9.10.8

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-36184
github	www.github.com/FasterXML/jackson-databind/issues/2998
cowtowncoder	www.cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
security	www.security.netapp.com/advisory/ntap-20210205-0005/
lists	www.lists.debian.org/debian-lts-announce/2021/04/msg00025.html
oracle	www.oracle.com/security-alerts/cpuApr2021.html
oracle	www.oracle.com//security-alerts/cpujul2021.html
oracle	www.oracle.com/security-alerts/cpuoct2021.html
oracle	www.oracle.com/security-alerts/cpujan2022.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Dec 2021 19:16Current

8.6High risk

Vulners AI Score8.6

CVSS26.8

CVSS38.1

EPSS0.003

SSVC

CWE-502