Lucene search

K
osvGoogleOSV:CVE-2020-11619
HistoryApr 07, 2020 - 11:15 p.m.

CVE-2020-11619

2020-04-0723:15:00
Google
osv.dev
7

AI Score

6.5

Confidence

Low

EPSS

0.05

Percentile

92.9%

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).