Lucene search

Unsafe Deserialization in jackson-databind

🗓️ 09 Dec 2021 19:59:16Reported by GitHub Advisory DatabaseType

Unsafe deserialization in jackson-databin

Reporter	Title	Published	Views	Family All 54
OSV	Unsafe Deserialization in jackson-databind	9 Dec 202119:16	–	osv
OSV	CVE-2020-36189	6 Jan 202123:15	–	osv
OSV	jackson-databind - security update	25 Apr 202100:00	–	osv
Prion	Code injection	6 Jan 202123:15	–	prion
UbuntuCve	CVE-2020-36189	6 Jan 202100:00	–	ubuntucve
Debian CVE	CVE-2020-36189	6 Jan 202123:15	–	debiancve
NVD	CVE-2020-36189	6 Jan 202123:15	–	nvd
RedhatCVE	CVE-2020-36189	7 Jan 202120:15	–	redhatcve
Cvelist	CVE-2020-36189	6 Jan 202122:29	–	cvelist
Veracode	Arbitrary Code Execution	8 Jan 202107:27	–	veracode

Vulners

Node

com.fasterxml.jackson.core jackson-databindRange<2.6.7.5

com.fasterxml.jackson.core jackson-databindRange2.7.0–2.9.10.8

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-36189
github	www.github.com/FasterXML/jackson-databind/issues/2996
cowtowncoder	www.cowtowncoder.medium.com/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
security	www.security.netapp.com/advisory/ntap-20210205-0005/
lists	www.lists.debian.org/debian-lts-announce/2021/04/msg00025.html
oracle	www.oracle.com/security-alerts/cpuApr2021.html
oracle	www.oracle.com//security-alerts/cpujul2021.html
oracle	www.oracle.com/security-alerts/cpuoct2021.html
oracle	www.oracle.com/security-alerts/cpujan2022.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Dec 2021 19:16Current

8.6High risk

Vulners AI Score8.6

CVSS26.8

CVSS38.1

EPSS0.003

CWE-502