CVE-2018-19361

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

Date published : 2019-01-02

http://www.securityfocus.com/bid/107985

https://seclists.org/bugtraq/2019/May/68