Lucene search
+L

1 matches found

OSV
OSV
added 2020/06/18 2:44 p.m.19 views

GHSA-C2Q3-4QRH-FM48 Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and...

8.1CVSS7.1AI score0.04458EPSS
SaveExploits0References13
Rows per page
Query Builder