diff --git a/advisories/github-reviewed/2020/06/GHSA-f3j5-rmmp-3fc5/GHSA-f3j5-rmmp-3fc5.json b/advisories/github-reviewed/2020/06/GHSA-f3j5-rmmp-3fc5/GHSA-f3j5-rmmp-3fc5.json index 0785cb37976..3a24623b5a5 100644 --- a/advisories/github-reviewed/2020/06/GHSA-f3j5-rmmp-3fc5/GHSA-f3j5-rmmp-3fc5.json +++ b/advisories/github-reviewed/2020/06/GHSA-f3j5-rmmp-3fc5/GHSA-f3j5-rmmp-3fc5.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-f3j5-rmmp-3fc5", - "modified": "2021-08-30T14:18:33Z", + "modified": "2023-09-13T18:28:28Z", "published": "2020-06-15T18:44:48Z", "aliases": [ "CVE-2019-17267" ], "summary": "Improper Input Validation in jackson-databind", - "details": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.", + "details": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 and 2.8.11.5. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.", "severity": [ { "type": "CVSS_V3", @@ -20,6 +20,35 @@ "ecosystem": "Maven", "name": "com.fasterxml.jackson.core:jackson-databind" }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.9.0" + }, + { + "fixed": "2.9.10" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "com.fasterxml.jackson.core:jackson-databind" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, "ranges": [ { "type": "ECOSYSTEM", @@ -28,7 +57,7 @@ "introduced": "0" }, { - "fixed": "2.9.10" + "fixed": "2.8.11.5" } ] } @@ -44,6 +73,10 @@ "type": "WEB", "url": "https://github.com/FasterXML/jackson-databind/issues/2460" }, + { + "type": "WEB", + "url": "https://github.com/FasterXML/jackson-databind/commit/191a4cdf87b56d2ddddb77edd895ee756b7f75eb" + }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:3200"