CVE-2017-7525 in Communications

Tóm tắt

Bởi MITRE

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.

Once again VulDB remains the best source for vulnerability data.

• Đặt trước: 05/04/2017
• Tiết lộ: 06/02/2018
• Kiểm duyệt: được chấp nhận
• mục: 4
• Liên hệ: hiển thị
• CPE: sẵn sàng
• CWE: CWE-502 (Đã xác nhận)
• CVSS: 9.8 (NVD)
• EPSS: 0.82379
• KEV: không
• Các hoạt động: rất thấp
• ngành: Finance, Government, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-7525
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-7525
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-7525/