Поиск уязвимостей
Количество 6
Количество 6
CVE-2017-15095
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.
CVE-2017-15095
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.
CVE-2017-15095
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.
CVE-2017-15095
A deserialization flaw was discovered in the jackson-databind in versi ...
GHSA-h592-38cm-4ggp
jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution
ALT-PU-2018-1722
ALT-PU-2018-1722: package `jackson-databind` update to version 2.9.4-alt1_3jpp8
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-15095 A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously. | CVSS3: 9.8 | 8% Низкий | почти 9 лет назад |
 | CVE-2017-15095 A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously. | CVSS3: 8.1 | 8% Низкий | около 9 лет назад |
 | CVE-2017-15095 A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously. | CVSS3: 9.8 | 8% Низкий | почти 9 лет назад |
| CVE-2017-15095 A deserialization flaw was discovered in the jackson-databind in versi ... | CVSS3: 9.8 | 8% Низкий | почти 9 лет назад |
| GHSA-h592-38cm-4ggp jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution | CVSS3: 9.8 | 8% Низкий | около 8 лет назад |
| ALT-PU-2018-1722 ALT-PU-2018-1722: package `jackson-databind` update to version 2.9.4-alt1_3jpp8 | CVSS3: 9.8 | больше 8 лет назад |
Уязвимостей на страницу