Jodd

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jodd records in CISA KEV

No Jodd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jodd 1 record MEDIUM Jodd Http 1 record LOW

Records

2 records

TI-2018-15196 CVE-2018-21234 · GHSA-jrg3-qq99-35g7

Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.

MEDIUM 53

Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08318 Published 2020-05-21 Fixed in 5.0.4 CWE-502

TI-2022-12061 CVE-2022-29631 · GHSA-pp3c-cf6j-m3ff

Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via…

LOW 35

Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01004 Published 2022-06-06 Fixed in 6.2.1 CWE-74

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0