Description
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
Remediation
References
Related Vulnerabilities
WordPress Plugin CONTUS VBLOG-Video Blogging 'save.php' Arbitrary File Upload (1.0)
WordPress Plugin Floating Tweets Multiple Vulnerabilities (1.0.1)
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.15)
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.29)
Moodle Improper Authentication Vulnerability (CVE-2021-40693)