Security Advisory
CVE-2020-9547
9.8
CRITICAL
Vulnerability Description
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
Published Date
March 2, 2020
Official Source
NIST NVD Advisory