Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2020-10672
HistoryMar 18, 2020 - 9:17 p.m.

CVE-2020-10672

2020-03-1821:17:43
mitre
github.com

6.7 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.7%

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).