Lucene search
K

6 matches found

OSV
OSV
added 2019/07/30 11:15 a.m.27 views

CVE-2019-14439

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has the logback jar in the classpath...

7.5CVSS6.6AI score
Exploits0References29
NVD
NVD
added 2019/07/30 11:15 a.m.20 views

CVE-2019-14439

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has the logback jar in the classpath...

7.5CVSS8.4AI score0.10392EPSS
Exploits0References29
UbuntuCve
UbuntuCve
added 2019/07/30 11:15 a.m.31 views

CVE-2019-14439

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has the logback jar in the classpath...

7.5CVSS7.1AI score0.10392EPSS
Exploits0References5
CVE
CVE
added 2019/07/30 10:49 a.m.180 views

CVE-2019-14439

CVE-2019-14439 describes a polymorphic typing deserialization issue in FasterXML jackson-databind 2.x prior to 2.9.9.2. When Default Typing is enabled (globally or for a property) and logback is in the classpath, an externally exposed JSON endpoint may be vulnerable to unsafe deserialization. Aff...

7.5CVSS8.4AI score0.10392EPSS
Exploits0References29Affected Software1
Cvelist
Cvelist
added 2019/07/30 10:49 a.m.24 views

CVE-2019-14439

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has the logback jar in the classpath...

8.5AI score0.10392EPSS
Exploits0References29
Debian CVE
Debian CVE
added 2019/07/30 10:49 a.m.31 views

CVE-2019-14439

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has the logback jar in the classpath...

7.5CVSS8.7AI score0.10392EPSS
Exploits0
Rows per page
Query Builder