Executive brief
jackson-databind mishandles the interaction between serialization gadgets and typing
Affected products
- Maven com.fasterxml.jackson.core:jackson-databind
Junglewise Threat Intelligence
CVE-2020-10969: jackson-databind mishandles the interaction between serialization gadgets and typing
CVE-2020-10969 · Severity: low · CVSS 3.1 · Published 2020-04-23
Technologies: com.fasterxml.jackson.core:jackson-databind (Maven). Vendors: Maven.