Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2020/04/23 8:19 p.m.69 views

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded aka commons-jelly...

8.1CVSS3.5AI score0.0564EPSS
SaveExploits0References12Affected Software1
Rows per page
Query Builder