CVE: 2019-14892 found in jackson-databind - Version: 2.4.2 [JAVA]

[github-actions[bot]]

Veracode Software Composition Analysis

Attribute	Details
Library	jackson-databind
Description	General data-binding functionality for Jackson: works on core streaming API
Language	JAVA
Vulnerability	Remote Code Execution
Vulnerability description	jackson-databind is vulnerable to remote code execution. The application does not block the commons-configuration and commons-configuration2 classes during deserialization, which would allow a remote attacker to leverage the vulnerability to execute arbitrary code.
CVE	2019-14892
CVSS score	7.5
Vulnerability present in version/s	2.0.0-RC1-2.6.7.2
Found library version/s	2.4.2
Vulnerability fixed in version	2.6.7.3
Library latest version	2.16.1
Fix

Links:

• https://sca.analysiscenter.veracode.com/vulnerability-database/libraries/908?version=2.4.2
• https://sca.analysiscenter.veracode.com/vulnerability-database/vulnerabilities/22002
• Patch: https://github.com/FasterXML/jackson-databind/commit/a3939d36edcc755c8af55bdc1969e0fa8438f9db

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/43

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/43

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/43

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/43

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/43

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/43

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/43

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/43

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/43

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/63

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/63

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/63

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/63

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/63

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/64

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/64

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/64

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/64

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/64

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/65

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/65

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/65

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/65

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/65

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/65

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/67

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/68

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/68

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/68

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/68

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/68

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/68

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/68

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/68

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/68

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/68

[github-actions[bot]]

Veracode issue link to PR: https://github.com/tsaekao/verademo-java/pull/68