https://bugzilla.redhat.com/show_bug.cgi?id=1758171
--- Doc Text *updated* by Chess Hazlett <chazlett(a)redhat.com> ---
A flaw was discovered in jackson-databind, where it would permit polymorphic
deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An
attacker could use this flaw to execute arbitrary code.
--
You are receiving this mail because:
You are on the CC list for the bug.