Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Obsolete
Priority: Major
Fix Version/s: 7.1.3.GA
Affects Version/s: None
Component/s: Server
Labels:
None

Target Release:

7.backlog.GA

SFDC Cases Counter:
SFDC Cases Links:

Description

jackson-databind is vulnerable to remote code execution (RCE) attacks. Due to an incomplete fix for `CVE-2017-7525`, attackers can still send malicious code through JSON.

Attachments

Activity

People

Assignee:: Brian Stansberry

Reporter:: Thomas Diesler

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 2019/01/08 6:48 AM

Updated:: 2020/09/14 5:38 AM

Resolved:: 2019/11/08 12:05 PM