CVE-2019-12384

CVE-2019-12384

FasterXML jackson-databind 2.x before 2.9.9 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.

Source: CVE-2019-12384

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다