Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Jodd records in CISA KEVNo Jodd vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 53
Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08318 · Published 2020-05-21 · Fixed in 5.0.4 CWE-502
Open these records in search →