CVE-2018-19360

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.

Date published : 2019-01-02

http://www.securityfocus.com/bid/107985

https://seclists.org/bugtraq/2019/May/68