Beveiligingsadvies

CVE-2019-12384

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-06-24 15:34:08
Laatst bijgewerkt 2024-08-04 23:17:39
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.