Description
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
Remediation
References
Related Vulnerabilities
Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10321)
Drupal Core 4.7.x Denial of Service (4.7.0 - 4.7.4)
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-5394)
Jboss EAP Improper Authentication Vulnerability (CVE-2011-4085)
WordPress Plugin Responsive Logo Slideshow Cross-Site Scripting (1.0)