Security Advisory

CVE-2020-10673

8.8
HIGH

Vulnerability Description

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
Published Date March 18, 2020
Official Source NIST NVD Advisory