Security Advisory

CVE-2020-10672

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-03-18 21:17:43

Last updated 2024-08-04 11:06:11

Assigner mitre

State PUBLISHED

Description

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).

← Browse all CVEs View on cve.org ↗