WebLogic Deserialization of Untrusted Data Vulnerability - CVE-2019-20330 - Vulnerability Database

WebLogic Deserialization of Untrusted Data Vulnerability - CVE-2019-20330

Critical

Reference: CVE-2019-20330

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-20330

Title: WebLogic Deserialization of Untrusted Data Vulnerability

Overview:

FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.