Published threat advisories for February 10, 2020

A critical deserialization vulnerability exists in FasterXML jackson-databind, allowing remote code execution if applications process untrusted serialized data. This flaw stems from insufficient blocking of certain JNDI-related classes, enabling attackers to craft malicious payloads that can compromise data confidentia

NVD modified: NVD date unavailable