CVE-2020-9546 in Retail Sales Audit信息

摘要

由 VulDB • 2026-05-17

FasterXML jackson-databind 2.x 版本在 2.9.10.4 之前存在缺陷，错误处理了序列化 gadget 与类型（typing）之间的交互，涉及 org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig（即 shaded hikari-config）。

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2020-03-02

管理

已接受

条目

连接

显示

CPE

准备好

CWE

CWE-502 (已确认)

CVSS

9.8 (NVD)

EPSS

0.04613

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2020-9546
NVD	https://nvd.nist.gov/vuln/detail/CVE-2020-9546
CVE Details	https://www.cvedetails.com/cve/CVE-2020-9546/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!