Executive brief
Serialization gadgets exploit in jackson-databind
Affected products
- Maven com.fasterxml.jackson.core:jackson-databind
Junglewise Threat Intelligence
CVE-2020-35490: Serialization gadgets exploit in jackson-databind
CVE-2020-35490 · Severity: low · CVSS 3.1 · Published 2021-12-09
Technologies: com.fasterxml.jackson.core:jackson-databind (Maven). Vendors: Maven.