GHSA-JRG3-QQ99-35G7 Deserialization of Untrusted Data in Jodd

Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set...

Deserialization Of Untrusted Object

jodd-json is vulnerable to deserialization of untrusted object. The vulnerability exists when the setClassMetadataName method was introduced, which fails to properly restrict certain types of classes during deserialization...

CVE-2018-21234

Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set...

CVE-2018-21234: Deserialization of Untrusted Data

Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set...

PT-2020-8878

Name of the Vulnerable Software and Affected Versions Jodd versions prior to 5.0.4 Description The issue concerns the deserialization of untrusted JSON data when the setClassMetadataName is set. This allows for potential exploitation. Recommendations For versions prior to 5.0.4, update to version...