Aller au contenu
Se connecter
7.5 Élevée

CVE-2019-14892 A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit…

Description

A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code.

Produits et versions touchés

Produit Versions touchées Corrigé en
jackson-databind Versions non publiées

Autres CVE de jackson-databind

Les 2 CVE de jackson-databind →
CVE-2019-14893 A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit… 7.5 Élevée
Suivre cette CVE