Denial of Service Vulnerability in Jackson Databind Library from FasterXML
CVE-2020-36518
7.5HIGH
Key Information:
- Vendor
Fasterxml
- Status
- Vendor
- CVE Published:
- 11 March 2022
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2020-36518?
The jackson-databind library prior to version 2.13.0 is vulnerable to a denial of service attack that can be triggered by the processing of deeply nested objects, leading to a Java StackOverflow exception. This vulnerability may cause severe disruptions in applications utilizing the affected library, making it crucial for users to upgrade to the latest version to mitigate risks.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.