From e8d2e30af8a22d20cf2080b6a883f65d300aebb6 Mon Sep 17 00:00:00 2001 From: Salvatore Bonaccorso Date: Sat, 19 Sep 2020 13:46:26 +0200 Subject: Add CVE-2020-24750 --- data/CVE/2020.list | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/data/CVE/2020.list b/data/CVE/2020.list index 1f75abcb67..db710d0770 100644 --- a/data/CVE/2020.list +++ b/data/CVE/2020.list @@ -2161,7 +2161,11 @@ CVE-2020-24752 CVE-2020-24751 RESERVED CVE-2020-24750 (FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interact ...) - TODO: check + - jackson-databind + [buster] - jackson-databind (Minor issue) + NOTE: https://github.com/FasterXML/jackson-databind/issues/2798 + NOTE: Starting from 2.10 series mitigated as Safe Default Typing is enabled by default + NOTE: but still an issue when Default Typing is enabled. CVE-2020-24749 RESERVED CVE-2020-24748 -- cgit v1.2.3