|
|
Sonicwall Signatures
Go to All Categories list.
| FasterXML Jackson Databind Insecure Serialization |
Category: WEB-ATTACKS
FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of a deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper. |
|
|
|