THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2020-5411 (HIGH 8.1) — When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with global default typing en

[NVD] CVE-2020-5411 (HIGH 8.1) — When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with global default typing en

lownvdPublished 2020-06-11

CVE-2020-5411 CVSS: 8.1 HIGH Published: 2020-06-11T17:15:12.410

When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with global default typing enabled which means that through the previous exploit, ar

Indicators of compromise

CVE-2020-5411cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2020-5411