Lucene search

Unsafe Deserialization in jackson-databind

🗓️ 09 Dec 2021 19:51:16Reported by GitHub Advisory DatabaseType

Unsafe Deserialization in jackson-databind 2.x before 2.9.10.8 mishandles interaction between serialization gadgets and typin

Reporter	Title	Published	Views	Family All 52
RedhatCVE	CVE-2020-36187	7 Jan 202120:15	–	redhatcve
UbuntuCve	CVE-2020-36187	6 Jan 202100:00	–	ubuntucve
Debian CVE	CVE-2020-36187	6 Jan 202123:15	–	debiancve
Veracode	Arbitrary Code Execution	8 Jan 202105:55	–	veracode
OSV	Unsafe Deserialization in jackson-databind	9 Dec 202119:16	–	osv
OSV	CVE-2020-36187	6 Jan 202123:15	–	osv
OSV	jackson-databind - security update	25 Apr 202100:00	–	osv
Prion	Design/Logic Flaw	6 Jan 202123:15	–	prion
NVD	CVE-2020-36187	6 Jan 202123:15	–	nvd
Cvelist	CVE-2020-36187	6 Jan 202122:29	–	cvelist

Vulners

Node

com.fasterxml.jackson.core jackson-databindRange2.0.0–2.9.10.8

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-36187
github	www.github.com/FasterXML/jackson-databind/issues/2997
cowtowncoder	www.cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
security	www.security.netapp.com/advisory/ntap-20210205-0005/
lists	www.lists.debian.org/debian-lts-announce/2021/04/msg00025.html
oracle	www.oracle.com/security-alerts/cpuApr2021.html
oracle	www.oracle.com//security-alerts/cpujul2021.html
oracle	www.oracle.com/security-alerts/cpuoct2021.html
oracle	www.oracle.com/security-alerts/cpujan2022.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Dec 2021 19:16Current

8.6High risk

Vulners AI Score8.6

CVSS26.8

CVSS38.1

EPSS0.003

CWE-502