RULE(RULE ID:337129)

Rule General Information
Release Date: 2022-11-07
Rule Name: FasterXML Jackson-databind Remote Code Execution Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: FasterXML Jackson-databind implements basic data binding (mapping) functionality that allows for reading JSON content into Java Objects (POJOs) and JSON Trees ( JsonNode ), as well as writing Java Objects and trees as JSON. A vulnerability was found in FasterXML Jackson-databind, which could lead to remote code execution.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.