5 matches found
GHSA-JRG3-QQ99-35G7 Deserialization of Untrusted Data in Jodd
Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set...
Deserialization Of Untrusted Object
jodd-json is vulnerable to deserialization of untrusted object. The vulnerability exists when the setClassMetadataName method was introduced, which fails to properly restrict certain types of classes during deserialization...
CVE-2018-21234
Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set...
PT-2020-8878
Name of the Vulnerable Software and Affected Versions Jodd versions prior to 5.0.4 Description The issue concerns the deserialization of untrusted JSON data when the setClassMetadataName is set. This allows for potential exploitation. Recommendations For versions prior to 5.0.4, update to version...
