FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-04T11:21:13.816Z

Reserved: 2020-03-26T00:00:00

Link: CVE-2020-10969

cve-icon Vulnrichment

Updated: 2024-08-04T11:21:13.816Z

cve-icon NVD

Status : Modified

Published: 2020-03-26T13:15:13.077

Modified: 2024-11-21T04:56:28.820

Link: CVE-2020-10969

cve-icon Redhat

Severity : Important

Publid Date: 2020-03-03T00:00:00Z

Links: CVE-2020-10969 - Bugzilla

cve-icon OpenCVE Enrichment

No data.