SQL Injection Vulnerability in Jeesite of Jinan Zhuoyuan Software Co. Ltd (CNVD-2020-41721)

JeeSite is an enterprise information technology development infrastructure platform , Java enterprise applications open source framework. Jinan Zhuoyuan Software Co., Ltd. Jeesite SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

FasterXML jackson-databind input validation error vulnerability (CNVD-2019-41721)

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . An input validation error vulnerability exists in FasterXML jackson-databind. An attacker could exploit this vulnerability to execute malicious...