Description
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
Remediation
References
Related Vulnerabilities
WordPress Plugin cformsII HTML Injection (15.0.1)
MongoDb Out-of-bounds Write Vulnerability (CVE-2021-32040)
WordPress Plugin Namaste! LMS Cross-Site Scripting (2.5.9.4)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7849)
WordPress Plugin Target First Live chat Unspecified Vulnerability (1.0)