ID | CVE-2020-11111 | ||||||
Sažetak | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms). | ||||||
Reference |
|
||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | AV:N/AC:M/Au:N/C:P/I:P/A:P | ||||||
Zadnje važnije ažuriranje | 03-07-2024 - 01:36 | ||||||
Objavljeno | 31-03-2020 - 05:15 |