来源:Jackson官网
发布日期:2020-03-25
阅读次数:767
评论:0
更新标题
Block one more gadget type (apache/commons-proxy)
更新详情
(Work-in-Progress)
Another gadget type(s) reported regarding a class of `apache/commons-proxy` library.
See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for description of the general problem.
Mitre id:
Reporter: Yiting Fan
Fix will be included in:
* 2.9.10.4
* Does not affect 2.10.0 and later
评论