CVE-2021-20190 — A flaw was found in jackson-databind before 2.9.10.7 (CVSS 8.1)

Description

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
jackson-databind	Versions non publiées

Les 2 CVE de jackson-databind →

CVE-2020-25649 A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly Non notée

CVE-2021-20190 A flaw was found in jackson-databind before 2.9.10.7

Description

Produits et versions touchés

Autres CVE de jackson-databind