Sploitus

CVE-2020-9546

No indexed exploits for CVE-2020-9546 yet

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).

Affected products
Alt Linux, Almalinux, Centos, Debian, Red Hat, Red Os, Rocky Linux, Ubuntu
Fasterxml Jackson-databind
< 2.7.9.7, 2.8.11.6, 2.9.10.4
CVSS 3.1
9.8 CRITICAL
EPSS
4.6% (91th percentile)
Weakness
CWE-502
NVD status
Analyzed
Published
2020-03-02
CVE-2020-9546 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2020-9546 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2020-9546 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.