CVE-2019-12384

CVE-2019-12384 Jackson RCE And SSRF 0x01 python -m SimpleHTTPServer python -m SimpleHTTPServer Serving HTTP on 0.0.0.0 port 8000 ... 127.0.0.1 - - 24/Jul/2019 03:06:32 "GET /inject.sql HTTP/1.1" 200 - inject.sql CREATE ALIAS SHELLEXEC AS $$ String shellexecString cmd throws java.io.IOException...

CVE-2020-36188

Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource How to RCE pom.xml com.fasterxml.jackson.core jackson-databind 2.9.10.7...

CVE-2020-36179

Description CVE-2020-36179： FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS. CVE-2020-36180： FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the...

CVE-2019-12086-jackson-databind-file-read

jackson-CVE-2019-12086 Vulnerability Description When Default Typing is enabled, and the classpath contains mysql-connector-java version 8.0.15 released on 2019.2.1 or earlier, an attacker can read arbitrary files by sending malicious JSON data. The mysql-connector-java library is the commonly us...

Astra Linux – Vulnerability in Jackson-Databind

FasterXML Jackson-Databind 2.x versions before 2.9.10.8 mishandle the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool...

Astra Linux – Vulnerability in Jackson-Databind

FasterXML Jackson-Databind 2.x versions before 2.9.10.8 mishandle the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS...

Astra Linux – Vulnerability in Jackson-Databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource...

CLEANSTART-2026-NN88858 Polymorphic Typing issue was discovered in FasterXML jackson-databind 2

Security vulnerability affects the apache-hive package. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2...

CLEANSTART-2026-PS95562 Polymorphic Typing issue was discovered in FasterXML jackson-databind 2

Security vulnerability affects the apache-hive package. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2...

CLEANSTART-2026-RV05349 Polymorphic Typing issue was discovered in FasterXML jackson-databind 2

Security vulnerability affects the apache-hive package. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2...

CLEANSTART-2026-JD21089 Polymorphic Typing issue was discovered in FasterXML jackson-databind 2

Security vulnerability affects the apache-hive package. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2...

CLEANSTART-2026-UF85195 Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2

Security vulnerability affects the apache-hive package. A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2...

CLEANSTART-2026-TS69470 Polymorphic Typing issue was discovered in FasterXML jackson-databind 2

Security vulnerability affects the apache-hive package. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2...

CLEANSTART-2026-RO69102 Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2

Security vulnerability affects the apache-hive package. A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2...

CLEANSTART-2026-QU95905 Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2

Security vulnerability affects the apache-hive package. A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2...

CLEANSTART-2026-BN96134 Polymorphic Typing issue was discovered in FasterXML jackson-databind 2

Security vulnerability affects the apache-hive package. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2...

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...

Astra Linux – Vulnerability in Jackson-Databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource...

Astra Linux – Vulnerability in Jackson-Databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource...