Resources
Vulnerability
Deserialization of Untrusted Data
Resources
Vulnerability

Deserialization of Untrusted Data

CWE ID:
CWE-502
Share this Resource
9.8
critical

Overview

A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0...
Scantist CVSS
Published : 2020-03-02T21:15:00Z
Scope
Unchanged
Attack Vector
Network
Base Severity
Critical
Integrity Impact
High
User Interaction
None
Attack Complexity
Low
Availabillity
High
Privileges Required
None
Confidentiality
High
Share this Resource

Related Vulnerabilities

Exploring Associated Weaknesses

9.8
Critical

CVE-2022-3370

DevOps has grown in popularity for the past decade, allowing companies to build and deploy software rapidly.