| Deeply nested json in jackson-databindCVE-2020-36518 · GHSA-57J2-W4CX-62H2 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649 · GHSA-288C-CQ4H-88GQ |
com.fasterxml.jackson.core:jackson-databindA-MQ Clients 2/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10672 · GHSA-95CM-88F5-F2C7 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14195 · GHSA-MC6H-4QGP-37QH |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Server-Side Request Forgery (SSRF) in jackson-databindCVE-2018-14721 · GHSA-9MXF-G3X6-WV74 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14062 · GHSA-C265-37VJ-CWCC |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111 · GHSA-V3XW-C963-F5HC |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11620 · GHSA-H4RC-386G-6M85 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112 · GHSA-58PP-9C76-5625 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14060 · GHSA-J823-4QCH-3RGM |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11113 · GHSA-9VVP-FXW6-JCXR |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14061 · GHSA-C2Q3-4QRH-FM48 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XML External Entity Reference (XXE) in jackson-databindCVE-2018-14720 · GHSA-X2W5-5M2G-7H5M |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11619 · GHSA-27XJ-RQX5-2255 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Unsafe Deserialization in jackson-databindCVE-2020-36183 · GHSA-9M6F-7XCQ-8VF8 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10673 · GHSA-FQWF-PJWF-7VQV |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Serialization gadgets exploit in jackson-databindCVE-2020-35491 · GHSA-R3GR-CXRF-HG25 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| FasterXML jackson-databind allows unauthenticated remote code execution CVE-2018-7489 · GHSA-CGGJ-FVV3-CQWV |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Serialization gadgets exploit in jackson-databindCVE-2020-35490 · GHSA-WH8G-3J2C-RQJ5 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in jackson-databindCVE-2021-20190 · GHSA-5949-RW7G-WX7W |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
