2 matches found
GHSA-9MXF-G3X6-WV74 Server-Side Request Forgery (SSRF) in jackson-databind
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery SSRF attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization...
10CVSS7.2AI score0.10458EPSS
SaveExploits0References31
CVE-2018-14721
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery SSRF attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization...
10CVSS7.2AI score0.10458EPSS
SaveExploits0References5
20