CVE-2020-11619 in jackson-databindinfo

Zusammenfassung

von VulDB • 23.08.2026

In FasterXML jackson-databind 2.x prima della versione 2.9.10.4 viene gestita in modo errato l'interazione tra serialization gadgets e typing, correlata a org.springframework.aop.config.MethodLocatingFactoryBean (noto anche come spring-aop).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservieren

07.04.2020

Moderieren

akzeptiert

Eintrag

VDB-152839

EPSS

0.03683

KEV

nein

Aktivitäten

very low

Quellen

Do you want to use VulDB in your project?

Use the official API to access entries easily!