Vigil@nce - FasterXML Jackson-Databind: overload via BeanDeserializer._deserializeFromArray(), analyzed on 03/10/2022
December 2022 by Vigil@nce
An attacker can trigger an overload of FasterXML Jackson-Databind, via BeanDeserializer._deserializeFromArray(), in order to trigger a denial of service.
Plus d'information sur : https://vigilance.fr/vulnerability/FasterXML-Jackson-Databind-overload-via-BeanDeserializer-deserializeFromArray-39442