Vulnerability Bulletins |
DSA-4542 jackson-databind - security update |
|
| Affected software | Debian |
|
It was discovered that jackson-databind, a Java library used to parseJSON and other data formats, did not properly validate user inputbefore attempting deserialization. This allowed an attacker providingmaliciously crafted input to perform code execution, or read arbitraryfiles on the server. More info: https://www.debian.org/security/2019/dsa-4542 |
|