SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

CVE-2020-14062 -- jackson-databind

ID: oval:org.secpod.oval:def:2003907	Date: (C)2020-10-08 (M)2023-11-13
Class: VULNERABILITY	Family: unix

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool .

Platform:

Debian 10.x

Debian 9.x

Product:

libjackson2-databind-java

Reference:

CVE-2020-14062


30479



423868



248364



909



195388



282