Monday, December 4, 2017

Apache Struts Jackson Databind Deserialization Code Execution Vulnerability

A vulnerability in Apache Struts could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability exists in the readValue() function of ObjectMapper, and is due to insufficient validation of user-supplied input by the affected software. An attacker could ...

from Google Alert - vulnerability http://ift.tt/2kn44yg
via IFTTT

No comments:

Post a Comment