A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.
Apache
Deserialization
Jackson Databind
Debian Linux
Jboss Enterprise Application Platform
+19
NVD
GitHub
CVSS 3.1
9.8
EPSS
5.3%