Lucene search

K
osvGoogleOSV:GHSA-JRG3-QQ99-35G7
HistoryFeb 10, 2022 - 11:03 p.m.

Deserialization of Untrusted Data in Jodd

2022-02-1023:03:26
Google
osv.dev
7
jodd
deserialization
untrusted data
json
security
vulnerability

EPSS

0.005

Percentile

75.3%

Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.

References

EPSS

0.005

Percentile

75.3%