https://bugzilla.redhat.com/show_bug.cgi?id=1591931
--- Comment #5 from Doran Moppert <dmoppert(a)redhat.com> ---
Mitigation:
According to the upstream advisory, this vulnerability only applies to
applications that do all of the following:
* Explicitly configure MappingJackson2JsonView.
* Do not set the jsonpParameterNames property of MappingJackson2JsonView to an
empty set.
* Expose sensitive user information over endpoints that can render content
with JSONP.
--
You are receiving this mail because:
You are on the CC list for the bug.