Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-10969

CVE-2020-10969:
jackson-databind mishandles the interaction between serialization gadgets and typing

8.8

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-10969
GHSA ID
GHSA-758m-v56v-grj4
EPSS Score
0.80093%
CWE
CWE-502
Published
4/23/2020
Updated
6/25/2024
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
com.fasterxml.jackson.core:jackson-databindmaven>= 2.9.0, <= 2.9.10.32.9.10.4

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

**st*rXML j**kson-**t**in* *.x ***or* *.*.**.* mis**n*l*s t** int*r**tion **tw**n s*ri*liz*tion *****ts *n* typin*, r*l*t** to j*v*x.swin*.J**itorP*n*.

Reasoning

No *n*lysis *v*il**l*