这是indexloc提供的服务,不要输入任何密码
Skip to content

Block one more gadget type (ignite-jta, CVE-2020-10650) #2658

@cowtowncoder

Description

@cowtowncoder

Another gadget type reported regarding a class of ignite-jta.
See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for description of the general problem.

Mitre id: CVE-2020-10650
Reporter: Srikanth Ramu, threedr3am'follower (2 concurrent reports)

Fix will be included in:

  • 2.9.10.4
  • Does not affect 2.10.0 and later

Metadata

Metadata

Assignees

No one assigned

    Labels

    CVEIssues related to public CVEs (security vuln reports)

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions