CVE-2020-36181
PoC —CVSS 3.1
8.1 high
EPSS
5%p92
Published
()
Modified
Description
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.
- Vendors
- netappdebianoraclefasterxml
- Products
- service level manager, debian linux, agile product lifecycle management, application testing suite, autovue for agile product lifecycle management, banking corporate lending process management, banking credit facilities process management, banking extensibility workbench, banking supply chain finance, banking treasury management, banking virtual account management, blockchain platform
- Weakness
- CWE-502
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.