deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-6095
Published: 2020-03-27
Description: An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-690, CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00029.html; https://gitlab.freedesktop.org/gstreamer/gst-rtsp-server/-/commit/44ccca3086dd81081d72ca0b21d0ecdde962fb1a; https://security.gentoo.org/glsa/202009-05
CVE: CVE-2020-10940
Published: 2020-03-27
Description: Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://cert.vde.com/en-us/advisories/vde-2020-013; https://cert.vde.com/en-us/advisories/vde-2020-013
CVE: CVE-2020-5551
Published: 2020-03-30
Description: Toyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command. The affected DCUs are installed in Lexus (LC, LS, NX, RC, RC F), TOYOTA CAMRY, and TOYOTA SIENNA manufactured in the regions other than Japan from Oct. 2016 to Oct. 2019. An attacker with certain knowledge on the target vehicle control system may be able to send some diagnostic commands to ECUs with some limited availability impacts; the vendor states critical vehicle controls such as driving, turning, and stopping are not affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://global.toyota/en/newsroom/corporate/32120629.html; https://jvn.jp/en/vu/JVNVU99396686/index.html; https://global.toyota/en/newsroom/corporate/32120629.html
CVE: CVE-2020-5527
Published: 2020-03-30
Description: When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://jvn.jp/en/vu/JVNVU91553662/index.html; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-005_en.pdf; https://jvn.jp/en/vu/JVNVU91553662/index.html
CVE: CVE-2020-10560
Published: 2020-03-30
Description: An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the SiteKey to insert into a crafted URL for components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-338
References: https://github.com/LucidUnicorn/CVE-2020-10560-Key-Recovery; https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read; https://github.com/LucidUnicorn/CVE-2020-10560-Key-Recovery
CVE: CVE-2019-7755
Published: 2020-03-30
Description: In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.exploit-database.net/?id=101060; https://www.exploit-db.com/exploits/46431/; https://www.weberp.org
CVE: CVE-2020-8509
Published: 2020-03-30
Description: Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://www.manageengine.com/products/desktop-central/unauthenticated-servlet-access.html; https://www.manageengine.com/products/desktop-central/unauthenticated-servlet-access.html
CVE: CVE-2019-17560
Published: 2020-03-30
Description: The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295
References: https://lists.apache.org/thread.html/r354d7654efa1050539fe56a3257696d1faeea4f3f9b633c29ec89609%40%3Cdev.netbeans.apache.org%3E; https://www.oracle.com/security-alerts/cpujul2020.html; https://lists.apache.org/thread.html/r354d7654efa1050539fe56a3257696d1faeea4f3f9b633c29ec89609%40%3Cdev.netbeans.apache.org%3E
CVE: CVE-2019-17561
Published: 2020-03-30
Description: The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://lists.apache.org/thread.html/rb218aa720fc525f63d91761fbf67854f454ce7a697dbbee2001ae8b1%40%3Cdev.netbeans.apache.org%3E; https://www.oracle.com/security-alerts/cpujul2020.html; https://lists.apache.org/thread.html/rb218aa720fc525f63d91761fbf67854f454ce7a697dbbee2001ae8b1%40%3Cdev.netbeans.apache.org%3E
CVE: CVE-2020-7599
Published: 2020-03-30
Description: All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with the --info log level flag, the Gradle Logger logs an AWS pre-signed URL. If this build log is publicly visible (as it is in many popular public CI systems like TravisCI) this AWS pre-signed URL would allow a malicious actor to replace a recently uploaded plugin with their own.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://blog.gradle.org/plugin-portal-update; https://snyk.io/vuln/SNYK-JAVA-COMGRADLEPLUGINPUBLISH-559866; https://blog.gradle.org/plugin-portal-update
CVE: CVE-2020-7610
Published: 2020-03-30
Description: All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's _bsotype, leading to cases where an object is serialized as a document rather than the intended BSON type.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://snyk.io/vuln/SNYK-JS-BSON-561052; https://snyk.io/vuln/SNYK-JS-BSON-561052
CVE: CVE-2016-11023
Published: 2020-03-30
Description: odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://groups.google.com/d/msg/odata4j-discuss/_lBwwXP30g0/Av6zkZMdBwAJ; https://groups.google.com/d/msg/odata4j-discuss/_lBwwXP30g0/Av6zkZMdBwAJ
CVE: CVE-2016-11024
Published: 2020-03-30
Description: odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://groups.google.com/d/msg/odata4j-discuss/_lBwwXP30g0/Av6zkZMdBwAJ; https://groups.google.com/d/msg/odata4j-discuss/_lBwwXP30g0/Av6zkZMdBwAJ
CVE: CVE-2020-5255
Published: 2020-03-30
Description: In Symfony before versions 4.4.7 and 5.0.7, when a `Response` does not contain a `Content-Type` header, affected versions of Symfony can fallback to the format defined in the `Accept` header of the request, leading to a possible mismatch between the response&#39;s content and `Content-Type` header. When the response is cached, this can prevent the use of the website by other users. This has been patched in versions 4.4.7 and 5.0.7.
CVSS Score: 2.6 (LOW)
CWE: CWE-435, CWE-20
References: https://github.com/symfony/symfony/commit/dca343442e6a954f96a2609e7b4e9c21ed6d74e6; https://github.com/symfony/symfony/security/advisories/GHSA-mcx4-f5f5-4859; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C36JLPHUPKDFAX6D5WYFC4ALO2K7RDUQ/
CVE: CVE-2020-5274
Published: 2020-03-30
Description: In Symfony before versions 5.0.5 and 4.4.5, some properties of the Exception were not properly escaped when the `ErrorHandler` rendered it stacktrace. In addition, the stacktrace were displayed even in a non-debug configuration. The ErrorHandler now escape alls properties of the exception, and the stacktrace is only display in debug configuration. This issue is patched in symfony/http-foundation versions 4.4.5 and 5.0.5
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://github.com/symfony/symfony/commit/629d21b800a15dc649fb0ae9ed7cd9211e7e45db; https://github.com/symfony/symfony/commit/cf80224589ac05402d4f72f5ddf80900ec94d5ad; https://github.com/symfony/symfony/security/advisories/GHSA-m884-279h-32v2
CVE: CVE-2020-5275
Published: 2020-03-30
Description: In symfony/security-http before versions 4.4.7 and 5.0.7, when a `Firewall` checks access control rule, it iterate overs each rule's attributes and stops as soon as the accessDecisionManager decides to grant access on the attribute, preventing the check of next attributes that should have been take into account in an unanimous strategy. The accessDecisionManager is now called with all attributes at once, allowing the unanimous strategy being applied on each attribute. This issue is patched in versions 4.4.7 and 5.0.7.
CVSS Score: 7.6 (HIGH)
CWE: CWE-285, CWE-863
References: https://github.com/symfony/symfony/commit/c935e4a3fba6cc2ab463a6ca382858068d63cebf; https://github.com/symfony/symfony/security/advisories/GHSA-g4m9-5hpf-hx72; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C36JLPHUPKDFAX6D5WYFC4ALO2K7RDUQ/
CVE: CVE-2020-5723
Published: 2020-03-30
Description: The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-312, CWE-312
References: https://www.tenable.com/security/research/tra-2020-17; https://www.tenable.com/security/research/tra-2020-17
CVE: CVE-2020-5724
Published: 2020-03-30
Description: The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.tenable.com/security/research/tra-2020-17; https://www.tenable.com/security/research/tra-2020-17
CVE: CVE-2020-5725
Published: 2020-03-30
Description: The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint. A remote unauthenticated attacker can invoke the login action with a crafted username and, through the use of timing attacks, can discover user passwords.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/156976/Grandstream-UCM6200-Series-WebSocket-1.0.20.20-SQL-Injection.html; https://www.tenable.com/security/research/tra-2020-17; http://packetstormsecurity.com/files/156976/Grandstream-UCM6200-Series-WebSocket-1.0.20.20-SQL-Injection.html
CVE: CVE-2020-5726
Published: 2020-03-30
Description: The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A remote unauthenticated attacker can invoke the challenge action with a crafted username and discover user passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/156977/Grandstream-UCM6200-Series-CTI-Interface-SQL-Injection.html; https://www.tenable.com/security/research/tra-2020-17; http://packetstormsecurity.com/files/156977/Grandstream-UCM6200-Series-CTI-Interface-SQL-Injection.html
CVE: CVE-2019-20634
Published: 2020-03-30
Description: An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores from Proofpoint email headers, it is possible to build a copy-cat Machine Learning Classification model and extract insights from this model. The insights gathered allow an attacker to craft emails that receive preferable scores, with a goal of delivering malicious emails.
CVSS Score: 3.7 (LOW)
CWE: CWE-697
References: https://github.com/moohax/Proof-Pudding; https://github.com/moohax/Talks/blob/master/slides/DerbyCon19.pdf; https://www.proofpoint.com/us/security/CVE-2019-20634
CVE: CVE-2019-19605
Published: 2020-03-30
Description: X-Plane before 11.41 allows Arbitrary Memory Write via crafted network packets, which could cause a denial of service or arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://blog.0xlabs.com/2020/03/x-plane-1141-remote-command-execution.html; https://blog.0xlabs.com/2020/03/x-plane-1141-remote-command-execution.html
CVE: CVE-2019-19606
Published: 2020-03-30
Description: X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths (or a leak of OS credentials to a remote system) via crafted network packets. This could be used to execute arbitrary commands on the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.0xlabs.com/2020/03/x-plane-1141-remote-command-execution.html; https://blog.0xlabs.com/2020/03/x-plane-1141-remote-command-execution.html
CVE: CVE-2019-19912
Published: 2020-03-30
Description: In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/156951/codeBeamer-9.5-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/156951/codeBeamer-9.5-Cross-Site-Scripting.html
CVE: CVE-2019-19913
Published: 2020-03-30
Description: In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/156951/codeBeamer-9.5-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2020/Apr/9; http://packetstormsecurity.com/files/156951/codeBeamer-9.5-Cross-Site-Scripting.html
CVE: CVE-2019-9507
Published: 2020-03-30
Description: The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the application incorrectly neutralizes code syntax before executing. Since all commands within the web application are executed as root, this could allow a remote attacker authenticated with an administrator account to execute arbitrary commands as root.
CVSS Score: 8.3 (HIGH)
CWE: CWE-95, CWE-77
References: https://www.vertiv.com/en-us/support/software-download/it-management/avocent-universal-management-gateway-appliance--software-downloads/; https://www.vertiv.com/en-us/support/software-download/software/trellis-enterprise-and-quick-start-solutions-software-downloads/; https://www.vertiv.com/en-us/support/software-download/it-management/avocent-universal-management-gateway-appliance--software-downloads/
CVE: CVE-2019-9508
Published: 2020-03-30
Description: The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account could store a maliciously named file within the web application that would execute each time a user browsed to the page.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.vertiv.com/en-us/support/software-download/it-management/avocent-universal-management-gateway-appliance--software-downloads/; https://www.vertiv.com/en-us/support/software-download/software/trellis-enterprise-and-quick-start-solutions-software-downloads/; https://www.vertiv.com/en-us/support/software-download/it-management/avocent-universal-management-gateway-appliance--software-downloads/
CVE: CVE-2019-9509
Published: 2020-03-30
Description: The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter. The web application does not neutralize user-controllable input before displaying to users in a web page, which could allow a remote attacker authenticated with a user account to execute arbitrary code.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.vertiv.com/en-us/support/software-download/it-management/avocent-universal-management-gateway-appliance--software-downloads/; https://www.vertiv.com/en-us/support/software-download/software/trellis-enterprise-and-quick-start-solutions-software-downloads/; https://www.vertiv.com/en-us/support/software-download/it-management/avocent-universal-management-gateway-appliance--software-downloads/
CVE: CVE-2020-10374
Published: 2020-03-30
Description: A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://kb.paessler.com/en/topic/87668-how-can-i-mitigate-cve-2020-10374-until-i-can-update; https://tehtris.com/en/rce-on-prtg-network-monitor-tehtris-pentest/; https://www.paessler.com/prtg/history/stable#20.1.57.1745
CVE: CVE-2020-11104
Published: 2020-03-30
Description: An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or heap memory, from which sensitive information (such as memory layout or private keys) can be gleaned if the archive is distributed outside of a trusted context.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-908
References: https://github.com/USCiLab/cereal/issues/625; https://github.com/USCiLab/cereal/issues/625
CVE: CVE-2020-11105
Published: 2020-03-30
Description: An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::shared_ptr variable goes out of scope and is freed, and a new std::shared_ptr is allocated at the same address. Serialization fidelity thereby becomes dependent upon memory layout. In short, serialized std::shared_ptr variables cannot always be expected to serialize back into their original values. This can have any number of consequences, depending on the context within which this manifests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-763
References: https://github.com/USCiLab/cereal/issues/636; https://github.com/USCiLab/cereal/issues/636
CVE: CVE-2020-11106
Published: 2020-03-30
Description: An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $_SESSION['RF']["view_type"] wasn't sanitized if it was already set. This made stored XSS possible if one opens ajax_calls.php and uses the "view" action and places a payload in the type parameter, and then returns to the dialog.php page. This occurs because ajax_calls.php was also able to set the $_SESSION['RF']["view_type"] variable, but there it wasn't sanitized.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/trippo/ResponsiveFilemanager/issues/603; https://github.com/trippo/ResponsiveFilemanager/issues/603
CVE: CVE-2020-5284
Published: 2020-03-30
Description: Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory (.next). This does not affect files outside of the dist directory (.next). In general, the dist directory only holds build assets unless your application intentionally stores other assets under this directory. This issue is fixed in version 9.3.2.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://github.com/zeit/next.js/releases/tag/v9.3.2; https://github.com/zeit/next.js/security/advisories/GHSA-fq77-7p7r-83rj; https://github.com/zeit/next.js/releases/tag/v9.3.2
CVE: CVE-2020-5289
Published: 2020-03-30
Description: In Elide before 4.5.14, it is possible for an adversary to "guess and check" the value of a model field they do not have access to assuming they can read at least one other field in the model. The adversary can construct filter expressions for an inaccessible field to filter a collection. The presence or absence of models in the returned collection can be used to reconstruct the value of the inaccessible field. Resolved in Elide 4.5.14 and greater.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-285, CWE-552
References: https://github.com/yahoo/elide/pull/1236; https://github.com/yahoo/elide/pull/1236/commits/a985f0f9c448aabe70bc[PII_REDACTED]99de4576dc; https://github.com/yahoo/elide/security/advisories/GHSA-2mxr-89gf-rc4v
CVE: CVE-2020-7611
Published: 2020-03-30
Description: All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed to the client.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-444
References: https://github.com/micronaut-projects/micronaut-core/commit/9d1eff5c8df1d6cda1fe00ef046729b2a6abe7f1; https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-694p-xrhg-x3wm; https://snyk.io/vuln/SNYK-JAVA-IOMICRONAUT-561342
CVE: CVE-2020-9055
Published: 2020-03-30
Description: Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or information disclosure.
CVSS Score: 3.9 (LOW)
CWE: CWE-79, CWE-79
References: https://csp.poha.com/lynx/; https://kb.cert.org/vuls/id/962085/; https://csp.poha.com/lynx/
CVE: CVE-2020-11111
Published: 2020-03-31
Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2664; https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html; https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
CVE: CVE-2020-11112
Published: 2020-03-31
Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2666; https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html; https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
CVE: CVE-2020-11113
Published: 2020-03-31
Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2670; https://lists.debian.org/debian-lts-announce/2020/04/msg00012.html; https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062