Lucene search

Deserialization of Untrusted Data in jackson-databind

🗓️ 15 Jun 2020 18:56:44Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 21 Views

Deserialization vulnerability in jackson-databin

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Vulners

Node

com.fasterxml.jackson.core jackson-databindRange2.9.0–2.9.6

com.fasterxml.jackson.core jackson-databindRange2.8.0–2.8.11.1

com.fasterxml.jackson.core jackson-databindRange2.7.0–2.7.9.3

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-12022
github	www.github.com/FasterXML/jackson-databind/issues/2052
github	www.github.com/FasterXML/jackson-databind/commit/28badf7ef60ac3e7ef151cd8e8ec010b8479226a
access	www.access.redhat.com/errata/RHBA-2019:0959
access	www.access.redhat.com/errata/RHSA-2019:0782
access	www.access.redhat.com/errata/RHSA-2019:0877
access	www.access.redhat.com/errata/RHSA-2019:1106
access	www.access.redhat.com/errata/RHSA-2019:1107
access	www.access.redhat.com/errata/RHSA-2019:1108
access	www.access.redhat.com/errata/RHSA-2019:1140

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Jun 2020 18:44Current

2.5Low risk

Vulners AI Score2.5