https://bugzilla.redhat.com/show_bug.cgi?id=1725795
--- Doc Text *updated* by Eric Christensen <sparks(a)redhat.com> ---
A new polymorphic typing flaw was discovered in FasterXML jackson-databind, versions 2.x
through 2.9.9. With default typing enabled, an attacker can send a specifically crafted
JSON message to the server that allows them to read arbitrary local files.
--
You are receiving this mail because:
You are on the CC list for the bug.