Remote Code Execution (RCE) Through Deserialization

Jackson-databind is vulnerable to remote code execution attacks. These attacks are possible during bean deserialization and attackers are able to execute code and commands...

PT-2017-4058

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.8.10 and earlier FasterXML jackson-databind versions 2.9.x through 2.9.3 Description The issue allows for unauthenticated remote code execution due to an incomplete fix for a deserialization flaw. This can...

PT-2017-4061

Name of the Vulnerable Software and Affected Versions jackson-databind versions prior to 2.6.7.1 jackson-databind versions prior to 2.7.9.1 jackson-databind versions prior to 2.8.9 jackson-databind versions 2.0.0 through 2.9.5 Description A deserialization flaw in the jackson-databind library is...

PT-2007-1133

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.6.0 through 2.6.7.4 FasterXML jackson-databind versions 2.7.0 through 2.7.9.2 FasterXML jackson-databind versions 2.8.0 through 2.8.11.0 FasterXML jackson-databind versions 2.9.0 through 2.9.4 Description...