FasterXML Jackson-databind 2.15.2

CPE Details

FasterXML Jackson-databind 2.15.2
fasterxml
jackson-databind
2.15.2
2023-09-12
18h26 +00:00
2023-09-12
18h28 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:fasterxml:jackson-databind:2.15.2:*:*:*:*:*:*:*

Informations

Vendor

fasterxml

Product

jackson-databind

Version

2.15.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-35116 2023-06-13 22h00 +00:00 jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker.
4.7
Medium