THREAT OPS › Threat News › [NVD] CVE-2020-35728 (HIGH 8.1) — FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
[NVD] CVE-2020-35728 (HIGH 8.1) — FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
CVE-2020-35728 CVSS: 8.1 HIGH Published: 2020-12-27T05:15:11.590
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
Indicators of compromise
- CVE-2020-35728cve
- 2.9.10.8ipv4
- com.oracle.wls.shaded.orgdomain
Original source: https://nvd.nist.gov/vuln/detail/CVE-2020-35728