GHSA-f3j5-rmmp-3fc5CriticalCVSS 9.8

Improper Input Validation in jackson-databind

Published
June 15, 2020
Last Modified
September 13, 2023

🔗 CVE IDs covered (1)

CVE-2019-17267 →

📋 Description

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 and 2.8.11.5. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.

🎯 Affected products2

  • maven/com.fasterxml.jackson.core:jackson-databind:>= 2.9.0, < 2.9.10
  • maven/com.fasterxml.jackson.core:jackson-databind:< 2.8.11.5

🔗 References (23)