ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-36518

PoC —
CVSS 3.1
7.5 high
EPSS
5%p92
Published
()
Modified
Description

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

Vendors
fasterxmloracledebiannetapp
Products
jackson-databind, big data spatial and graph, coherence, commerce platform, communications billing and revenue management, communications cloud native core binding support function, communications cloud native core console, communications cloud native core network repository function, communications cloud native core network slice selection function, communications cloud native core security edge protection proxy, communications cloud native core service communication proxy, communications cloud native core unified data repository
Weakness
CWE-787
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (4.9%)

In the news

No ingested article mentions this CVE yet.