Open mend-bolt-for-github[bot] opened 5 years ago
General data-binding functionality for Jackson: works on core streaming API
Library home page: http://github.com/FasterXML/jackson
Path to dependency file: /tmp/ws-scm/cleverdrawer/app/build.gradle
Path to vulnerable library: /cleverdrawer/app/build.gradle
Dependency Hierarchy: - :x: **jackson-databind-2.9.9.3.jar** (Vulnerable Library)
Found in HEAD commit: c5ed2657f8dee2a40f232baef439a7ec9d8fc768
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
Publish Date: 2019-10-07
URL: CVE-2019-17267
Base Score Metrics not available
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17267
Release Date: 2019-10-07
Fix Resolution: 2.9.10
Step up your Open Source Security Game with WhiteSource here
CVE-2019-17267 - High Severity Vulnerability
General data-binding functionality for Jackson: works on core streaming API
Library home page: http://github.com/FasterXML/jackson
Path to dependency file: /tmp/ws-scm/cleverdrawer/app/build.gradle
Path to vulnerable library: /cleverdrawer/app/build.gradle
Dependency Hierarchy: - :x: **jackson-databind-2.9.9.3.jar** (Vulnerable Library)
Found in HEAD commit: c5ed2657f8dee2a40f232baef439a7ec9d8fc768
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
Publish Date: 2019-10-07
URL: CVE-2019-17267
Base Score Metrics not available
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17267
Release Date: 2019-10-07
Fix Resolution: 2.9.10
Step up your Open Source Security Game with WhiteSource here