RCE in jackson-databind

XMLWordPrintable

    • 8.08
    • 1
    • Severity 1 - Critical

      Issue Summary

      Jira Server used a vulnerable version of jackson-databind .
      In specific, the issue was present in FasterXML jackson-databind 2.x before 2.9.10.2 . More information here: https://nvd.nist.gov/vuln/detail/CVE-2019-20330.
      Upgrade jackson-databind to at least version 2.9.10.20200103 .

      Steps to Reproduce

      n/a

      Expected Results

      n/a

      Actual Results

      n/a

      Workaround

      N/A

            Assignee:
            Mateusz Ostaszewski (Inactive)
            Reporter:
            alexmin (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: