PT-2018-3325

CVE-2018-5968

·

Published

2018-01-21

·

Updated

2026-10-08

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions jackson-databind (affected versions not specified)
Description The issue is related to weaknesses in the deserialization mechanism of the jackson-databind library. Exploitation of this issue may allow a remote attacker to execute arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-184: Incomplete List of Disallowed Inputs
CWE-502: Deserialization of Untrusted Data
Related identifiers
CVE-2018-5968
BDU:2019-04797
GHSA-W3F4-3Q6J-RH82
ALT-PU-2018-1722
CLEANSTART-2026-JL35861
DSA-4114-1
MGASA-2018-0138
RHSA-2018:0479
RHSA-2018:0480
RHSA-2018:0481
RHSA-2018:1525
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com