netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-c8hm-7hpq-7jhg

Browse Source
This commit is contained in:
advisory-database[bot]
2024-03-15 01:11:59 +00:00
parent 378f951308
commit 8a3b6ba8ce
1 changed files with 35 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2019/01/GHSA-c8hm-7hpq-7jhg/GHSA-c8hm-7hpq-7jhg.json
+35 -8
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c8hm-7hpq-7jhg",
"modified": "2021-06-10T23:51:07Z",
"modified": "2024-03-15T01:11:21Z",
"published": "2019-01-04T19:07:03Z",
"aliases": [
"CVE-2018-19362"
],
"summary": "High severity vulnerability that affects com.fasterxml.jackson.core:jackson-databind",
"summary": "com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data",
"details": "FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.",
"severity": [
{
@@ -77,6 +77,25 @@
"database_specific": {
"last_known_affected_version_range": "<= 2.7.9.4"
}
},
{
"package": {
"ecosystem": "Maven",
"name": "com.fasterxml.jackson.core:jackson-databind"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.6.7.3"
}
]
}
]
}
],
"references": [
@@ -88,13 +107,17 @@
"type": "WEB",
"url": "https://github.com/FasterXML/jackson-databind/issues/2186"
},
{
"type": "WEB",
"url": "https://github.com/FasterXML/jackson-databind/commit/72cd4025a229fb28ec133235003dd4616f70afaa"
},
{
"type": "WEB",
"url": "https://github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d486f8264c2f2b"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHBA-2019:0959"
"url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E"
},
{
"type": "WEB",
@@ -164,6 +187,10 @@
"type": "WEB",
"url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHBA-2019:0959"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:0782"
@@ -216,6 +243,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:4037"
},
{
"type": "PACKAGE",
"url": "https://github.com/FasterXML/jackson-databind"
},
{
"type": "WEB",
"url": "https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8"
@@ -232,10 +263,6 @@
"type": "WEB",
"url": "https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3@%3Cdevnull.infra.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/107985"
@@ -245,7 +272,7 @@
"cwe_ids": [
"CWE-502"
],
"severity": "HIGH",
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2020-06-16T21:30:35Z",
"nvd_published_at": null