PT-2020-6671 · Fasterxml +3 · Jackson-Databind +3

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x before 2.9.10.8 Description: The issue is related to the interaction between serialization gadgets and typing, specifically with the org.apache.commons.dbcp2.datasources.PerUserPoolDataSource component...