Lucene search
+L

2 matches found

RedHat Linux
RedHat Linux
added 2023/01/26 9:42 a.m.8 views

jackson-databind: use of deeply nested arrays

A flaw was found In FasterXML jackson-databind. This issue could allow an attacker to benefit from resource exhaustion due to the lack of a check in BeanDeserializer.deserializeFromArray to prevent the use of deeply nested arrays. An application is only vulnerable with certain customized choices...

7.5CVSS6.8AI score0.02706EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2022/12/14 1:15 p.m.16 views

jackson-databind: use of deeply nested arrays

A flaw was found In FasterXML jackson-databind. This issue could allow an attacker to benefit from resource exhaustion due to the lack of a check in BeanDeserializer.deserializeFromArray to prevent the use of deeply nested arrays. An application is only vulnerable with certain customized choices...

7.5CVSS6.8AI score0.02706EPSS
SaveExploits1References4
Rows per page
Query Builder