FasterXML jackson-databind 2.x... CVE-2019-12384

4.3 AV AC AU C I A
发布: 2019-05-27
修订: 2020-10-15

FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.

0%
暂无可用Exp或PoC
当前有128条受影响产品信息