https://bugzilla.redhat.com/show_bug.cgi?id=1538332
Avital Pinnick <apinnick(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |apinnick(a)redhat.com
--- Doc Text *updated* ---
A deserialization flaw was discovered in the jackson-databind that could allow an
unauthenticated user to perform code execution by sending the maliciously crafted input to
the readValue method of the ObjectMapper. This issue extends the previous flaws
CVE-2017-7525 and CVE-2017-17485 by blacklisting more classes that could be used
maliciously.
--
You are receiving this mail because:
You are on the CC list for the bug.