A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.
Deserialization
Jackson Databind
Fedora
Debian Linux
Oncommand Api Services
+13
NVD
GitHub
CVSS 3.1
9.8
EPSS
4.9%
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.
Deserialization
Jackson Databind
Oncommand Api Services
Oncommand Workflow Automation
Steelstore Cloud Integrated Storage
+15
NVD
GitHub
CVSS 3.1
9.8
EPSS
10.7%