CVE-2020-11619: Deserialization of Untrusted Data

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean aka spring-aop...

org.springframework:spring-aop (1.2.2), org.springframework:spring-beans (1.2.2) +10 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (1.2.2)

org.springframework:spring-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.2 - org.springframework:spring-beans 1.2.2 -...

org.springframework:spring-aop (1.2.3), org.springframework:spring-beans (1.2.3) +10 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (1.2.3)

org.springframework:spring-core MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.3 - org.springframework:spring-beans 1.2.3 -...

org.springframework:spring-aop (1.2.4), org.springframework:spring-beans (1.2.4) +10 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (1.2.4)

org.springframework:spring-core MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.4 - org.springframework:spring-beans 1.2.4 -...

org.acegisecurity:acegi-security-tiger (1.0.0-rc1), org.apache.directory.mina:mina-integration-spring (>=0.9.1, <=0.9.5) +23 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (1.2.5)

org.springframework:spring-core MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security-tiger 1.0.0-rc1 -...

org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +20 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.0-m2)

org.springframework:spring-core MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0 - org.acegisecurity:acegi-security-adapters...

org.springframework:spring-aop (2.0-m4), org.springframework:spring-beans (2.0-m4) +7 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (2.0-m4)

org.springframework:spring-core MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m4 - org.springframework:spring-beans 2.0-m4 -...

org.springframework:spring-aop (1.2.2), org.springframework:spring-beans (1.2.2) +10 more potentially affected by CVE-2015-5211 via org.springframework:spring-core (1.2.2)

org.springframework:spring-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.2 - org.springframework:spring-beans 1.2.2 -...

org.springframework:spring-aop (1.2.3), org.springframework:spring-beans (1.2.3) +10 more potentially affected by CVE-2015-5211 via org.springframework:spring-core (1.2.3)

org.springframework:spring-core MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.3 - org.springframework:spring-beans 1.2.3 -...

org.springframework:spring-aop (2.0-m1), org.springframework:spring-beans (2.0-m1) +13 more potentially affected by CVE-2015-5211 via org.springframework:spring-core (2.0-m1)

org.springframework:spring-core MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m1 - org.springframework:spring-beans 2.0-m1 -...

org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +20 more potentially affected by CVE-2015-5211 via org.springframework:spring-core (2.0-m2)

org.springframework:spring-core MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0 - org.acegisecurity:acegi-security-adapters...

org.springframework:spring-aop (2.0-m4), org.springframework:spring-beans (2.0-m4) +7 more potentially affected by CVE-2015-5211 via org.springframework:spring-core (2.0-m4)

org.springframework:spring-core MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m4 - org.springframework:spring-beans 2.0-m4 -...

org.springframework:spring-aop (1.2.1), org.springframework:spring-beans (1.2.1) +10 more potentially affected by CVE-2018-1272 via org.springframework:spring-core (1.2.1)

org.springframework:spring-core MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.1 - org.springframework:spring-beans 1.2.1 -...

org.springframework:spring-aop (1.2.2), org.springframework:spring-beans (1.2.2) +10 more potentially affected by CVE-2018-1272 via org.springframework:spring-core (1.2.2)

org.springframework:spring-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.2 - org.springframework:spring-beans 1.2.2 -...

org.springframework:spring-aop (1.2.4), org.springframework:spring-beans (1.2.4) +10 more potentially affected by CVE-2018-1272 via org.springframework:spring-core (1.2.4)

org.springframework:spring-core MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.4 - org.springframework:spring-beans 1.2.4 -...

org.acegisecurity:acegi-security-tiger (1.0.0-rc1), org.apache.directory.mina:mina-integration-spring (>=0.9.1, <=0.9.5) +23 more potentially affected by CVE-2018-1272 via org.springframework:spring-core (1.2.5)

org.springframework:spring-core MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security-tiger 1.0.0-rc1 -...

org.springframework:spring-aop (2.0-m1), org.springframework:spring-beans (2.0-m1) +13 more potentially affected by CVE-2018-1272 via org.springframework:spring-core (2.0-m1)

org.springframework:spring-core MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m1 - org.springframework:spring-beans 2.0-m1 -...

org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +20 more potentially affected by CVE-2018-1272 via org.springframework:spring-core (2.0-m2)

org.springframework:spring-core MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0 - org.acegisecurity:acegi-security-adapters...

org.springframework:spring-aop (2.0-m4), org.springframework:spring-beans (2.0-m4) +7 more potentially affected by CVE-2018-1272 via org.springframework:spring-core (2.0-m4)

org.springframework:spring-core MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m4 - org.springframework:spring-beans 2.0-m4 -...

org.jasig.service:person-directory (1.0.1), org.jasig:person-directory (1.0.0) +26 more potentially affected by CVE-2018-1272 via org.springframework:spring-core (2.0.3)

org.springframework:spring-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.jasig.service:person-directory 1.0.1 - org.jasig:person-directory 1.0.0 -...