https://bugzilla.redhat.com/show_bug.cgi?id=1816330
--- Doc Text *updated* by Eric Christensen <sparks(a)redhat.com> ---
A flaw was found in FasterXML jackson-databind in versions 2.0.0 through 2.9.10.2. A
"gadget" exploit is possible due to a lack of a Java object being blocking from
being deserialized. The highest threat from this vulnerability is to data confidentiality
and integrity as well as system availability.
--
You are receiving this mail because:
You are on the CC list for the bug.