Tag

c3p0

Safeguard articles tagged "c3p0" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

CVE-2019-14540: Jackson-databind blacklist bypass via c3p...

CVE-2019-14540 lets attackers bypass jackson-databind's deserialization blacklist via c3p0 classes to achieve RCE. Here's what's affected, the timeline, and how to remediate.

Sep 29, 20257 min read