https://bugzilla.redhat.com/show_bug.cgi?id=1775293
Tomas Hoger <thoger(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|CVE-2019-17531 |CVE-2019-17531
|jackson-databind: |jackson-databind:
|polymorphic typing issue |Serialization gadgets in
|when enabling default |org.apache.log4j.receivers.
|typing for an externally |db.*
|exposed JSON endpoint and |
|having apache-log4j-extra |
|in the classpath leads to |
|code execution |
--
You are receiving this mail because:
You are on the CC list for the bug.