Executive brief
jackson-databind mishandles the interaction between serialization gadgets and typing
Affected products
- Maven com.fasterxml.jackson.core:jackson-databind
Junglewise Threat Intelligence
CVE-2020-11112: jackson-databind mishandles the interaction between serialization gadgets and typing
CVE-2020-11112 · Severity: low · CVSS 3.1 · Published 2020-06-10
Technologies: com.fasterxml.jackson.core:jackson-databind (Maven). Vendors: Maven.