6897 matches found
CVE-2020-35728
Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl. How to RCE pom.xml 4.0.0...
CVE-2020-9547
CVE-2020-9547：FasterXML/jackson-databind Remote Code Execution Vulnerability...
CVE-2020-9548
CVE-2020-9548: FasterXML/jackson-databind Remote Code Execution Vulnerability...
jackson-CVE-2020-8840
CVE-2020-8840 FasterXML/jackson-databind Remote Code Execution Vulnerability...
CVE-2020-14195
SimpleTest This is a simple test for FasterXML jackson-databind...
CVE-2020-8840
CVE-2020-8840: FasterXML/jackson-databind Remote Code Execution Vulnerability 0x00 Introduction jackson-databind is a JSON processing library under the FasterXML project. 0x01 Vulnerability Overview On February 19, NVD released a security advisory disclosing a remote code execution vulnerability...
CVE-2020-36179
Description CVE-2020-36179： FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS. CVE-2020-36180： FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the...
CVE-2022-25845-In-Spring
CVE-2022-25845-In-Spring Main Dependencies 1. jackson 2. commons-io Quick Reproduction 1. Import project into IntelliJ IDEA, build mvn install 2. Build and run Dockerfile docker build . 3. Run src/test/java/POC.java to execute the touch /tmp/pwned command Exploitation Guide Step1: Add...
CVE-2019-12086-jackson-databind-file-read
jackson-CVE-2019-12086 Vulnerability Description When Default Typing is enabled, and the classpath contains mysql-connector-java version 8.0.15 released on 2019.2.1 or earlier, an attacker can read arbitrary files by sending malicious JSON data. The mysql-connector-java library is the commonly us...
RHLW-2026-7DCB1A44E2EDEB0E Lightwell Security Advisory: jackson-core 2.17.3.rhlw-00005
Red Hat Lightwell has released com.fasterxml.jackson.core:jackson-core 2.17.3.rhlw-00005 with backported fixes for CVE-2026-18401, CVE-2026-68494, CVE-2026-89407, and CVE-2026-89425. CVE-2026-18401: jackson-core: Number length constraint bypass in non-blocking async JSON parser leads to potential...
CLSA-2026-1794466718 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (28 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 28 CVEs. Fixed in 2.4.3-tuxcare.7...
CLSA-2026-1794466600 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (15 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 15 CVEs. Fixed in 2.7.1-tuxcare.8...
CLSA-2026-1794466490 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (24 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 24 CVEs. Fixed in 2.2.3-tuxcare.6...
CLSA-2026-1794466374 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (27 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 27 CVEs. Fixed in 2.4.5-tuxcare.7...
CLSA-2026-1794466277 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (27 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 27 CVEs. Fixed in 2.4.1-tuxcare.6...
CLSA-2026-1794466171 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (25 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 25 CVEs. Fixed in 2.6.3-tuxcare.6...
CLSA-2026-1794466071 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (14 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 14 CVEs. Fixed in 2.7.3-tuxcare.7...
CLSA-2026-1794465982 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (26 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 26 CVEs. Fixed in 2.1.4-tuxcare.5...