Astra Linux – vulnerability in libjackson-json-java

A deserialization flaw was discovered in the Jackson Databind in versions prior to 2.8.10 and 2.9.1. This flaw could allow an unauthenticated user to execute arbitrary code by sending a maliciously crafted input to the readValue method within the ObjectMapper. This issue extends the previously...