sonatype-2021-4682 Security Details

CVE ID

sonatype-2021-4682

CWE

N/A

CVE Description

jackson-databind - Denial of Service (DoS)

Published

Dec 28, 2021

CVSS Score & Severity

7.5High

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

0%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

com/fasterxml/jackson/databind/node/NodeSerialization.readExternal(Ljava/io/ObjectInput;)V

JVMVulnerable params: 0

Affected Ecosystems

affected

Source

Sonatype

References

GitHub · Issue #3328PROJECT