DirectorySecurity Advisories
Sign In
Security Advisories

CGA-7vfc-ggrj-pv4v

Published

Last updated

https://images.chainguard.dev/security/CGA-7vfc-ggrj-pv4v
Package

hadoop-3.3

Latest Update
Under investigation
Aliases
  • CVE-2020-24616
  • GHSA-h3cw-g4mq-c5x2

Severity

8.1

High

CVSS V3

Summary

Code Injection in jackson-databind

Description

This project contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).

References

Updates

Safe Source for Open Source™
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images

Why Chainguard

Container Image SecurityVulnerability RemediationCompliance and Risk MitigationSoftware Supply Chain SecurityAI/ML Security

Customers

Customer StoriesChainguard Love

Company

About UsPricingOpen SourceCareersNewsroomLegal

Resources

Unchained BlogEventsTrust CenterDocumentation