Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gx6w-fqg7-mc3p

Опубликовано: 14 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An issue was discovered jackson-databind thru 2.15.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

An issue was discovered jackson-databind thru 2.15.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

EPSS

Процентиль: 3%
0.00015
Низкий

7.5 High

CVSS3

Дефекты

CWE-502
CWE-770

Связанные уязвимости

CVSS3: 4.7
ubuntu
больше 2 лет назад

jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker.

CVSS3: 4.7
redhat
больше 2 лет назад

jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker.

CVSS3: 4.7
nvd
больше 2 лет назад

jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker.

CVSS3: 4.7
debian
больше 2 лет назад

jackson-databind through 2.15.2 allows attackers to cause a denial of ...

CVSS3: 4.7
fstec
больше 2 лет назад

Уязвимость библиотеки Jackson-databind проекта FasterXML, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 3%
0.00015
Низкий

7.5 High

CVSS3

Дефекты

CWE-502
CWE-770