https://bugzilla.redhat.com/show_bug.cgi?id=1775300
Kunjan Rathod <krathod(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|CVE-2019-17531 |CVE-2019-17531
|jackson-databind: enabling |jackson-databind:
|default typing leads to |polymorphic typing issue
|code execution [fedora-all] |when enabling default
| |typing for an externally
| |exposed JSON endpoint and
| |having apache-log4j-extra
| |in the classpath leads to
| |code execution [fedora-all]
Severity|high |medium
--
You are receiving this mail because:
You are on the CC list for the bug.