2 matches found
GHSA-V3XW-C963-F5HC jackson-databind mishandles the interaction between serialization gadgets and typing
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq. aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms...
8.8CVSS7.1AI score0.03489EPSS
SaveExploits0References10
UBUNTU-CVE-2020-11111
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq. aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms...
8.8CVSS7.2AI score0.03489EPSS
SaveExploits0References5
20