Executive brief
jackson-databind mishandles the interaction between serialization gadgets and typing
Affected products
- Maven com.fasterxml.jackson.core:jackson-databind
Junglewise Threat Intelligence
CVE-2020-10968: jackson-databind mishandles the interaction between serialization gadgets and typing
CVE-2020-10968 · Severity: low · CVSS 3.1 · Published 2020-05-15
Technologies: com.fasterxml.jackson.core:jackson-databind (Maven). Vendors: Maven.