CVE-2022-42004
- Reference to the description:
- Description:
- In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.
- Last updated date:
- 12/02/2022
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/04/2022
- Reference url to background
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 10/04/2022
- Reference url to background