Security Advisory
CVE-2020-11620
8.1
HIGH
Vulnerability Description
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).
Published Date
April 7, 2020
Official Source
NIST NVD Advisory