Security Advisory

CVE-2018-19362

9.8
CRITICAL

Vulnerability Description

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.
Published Date January 2, 2019
Official Source NIST NVD Advisory