ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-36188

PoC —
CVSS 3.1
8.1 high
EPSS
11%p96
Published
()
Modified
Description

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.

Vendors
fasterxmlnetappdebianoracle
Products
jackson-databind, cloud backup, service level manager, debian linux, agile product lifecycle management, application testing suite, autovue for agile product lifecycle management, banking corporate lending process management, banking credit facilities process management, banking extensibility workbench, banking supply chain finance, banking treasury management
Weakness
CWE-502
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (10.9%)

In the news

No ingested article mentions this CVE yet.