Security Advisory

CVE-2020-9547

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-03-02 03:59:08
Last updated 2024-08-04 10:34:39
Assigner mitre
State PUBLISHED

Description

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).