← Back to CVE List

CVE-2018-5968

Published: 2018-01-22T04:29Z
Last Modified: 2024-11-21T04:09Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt