Security Advisory
CVE-2020-10672
8.8
HIGH
Vulnerability Description
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).
Published Date
March 18, 2020
Official Source
NIST NVD Advisory