NVD disclosure day

Published threat advisories for January 2, 2019

CVE advisoryCRITICAL

CVE-2018-14719

FasterXML Jackson-databind Polymorphic Deserialization Code Execution Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical vulnerability in the FasterXML jackson-databind library may permit remote attackers to execute arbitrary code by exploiting how certain classes are handled during data deserialization. This flaw, which can be reached via the network, allows for code execution on affected systems and potential compromise. Con

NVD modified: NVD date unavailable
CVE advisoryCRITICAL

CVE-2018-14718

FasterXML Jackson Databind Remote Code Execution via Polymorphic Deserialization

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A vulnerability in the jackson-databind library may permit remote attackers to execute arbitrary code. This occurs due to improper handling of specific class deserialization, which could be exploited if the library is reachable through untrusted input. This issue is relevant for organizations using the affected library

NVD modified: NVD date unavailable