Exploit for jackson

kitploit · 2026-08-25

Description

Remote code execution vulnerability in FasterXML jackson-databind (CVE-2020-8840).

Affected Fasterxml Jackson-databind versions

Fasterxml Jackson-databind< 2.7.9.7, 2.8.11.5, 2.9.10.3

All known vulnerabilities by product

Alt Linux Almalinux Centos Red Hat Red Os Rocky Linux Ubuntu Jackson-Databind

CVSS 9.8 for CVE-2020-8840

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-08-25 22:10

Last Seen:2026-08-26 02:51

Reporter:KitPloit

Tags

jackson-databindremote code executionFasterXMLCVE-2020-8840

Other exploits for CVE-2020-8840

2026-09-03 KitPloitKITPLOIT

2026-09-03 KitPloitKITPLOIT

2026-09-03 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind

2021-11-08 tester33333GITEE

Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind

2021-02-02 sh3llsasGITEE

Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform

2020-12-08 Keepb1ueGITEE

Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind

2020-11-11 Veraxy00GITHUB

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JAS502N-JACKSON-CVE-2020-8840
# CVE-2020-8840 FasterXML/jackson-databind Уязвимость удаленного выполнения кода

![](https://assets.kitploit.com/production/public/readmes/27368/07c4446712c7d9217c99413cd34689a91938559e6d995cf0598138267952b652.png)