CVE-2018-21234

CRITICAL9.8EPSS 25.2%

Deserialization of Untrusted Data in Jodd

Published: 2/10/2022Modified: 2/16/2024

Description

Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (16)