Security Advisory

CVE-2020-35728

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-12-27 04:32:36

Last updated 2025-08-27 20:33:46

Assigner mitre

State PUBLISHED

Description

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).

← Browse all CVEs View on cve.org ↗