TI-2017-11069 CVE-2017-15095 · GHSA-h592-38cm-4ggp
Deserialization of untrusted data in FasterXML jackson-databind
Priority MEDIUM 60
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readV…