Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-10673

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-fqwf-pjwf-7vqv

jackson-databind mishandles the interaction between serialization gadgets and typing FasterXML jackson-databind 2.x before 2.9.10.4 and 2.6.7.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).

gitlab/maven/com.fasterxml.jackson.core/jackson-databind/CVE-2020-10673

Deserialization of Untrusted Data FasterXML jackson-databind mishandles the interaction between serialization gadgets and typing, related to `com.caucho.config.types.ResourceRef`.`