Tag

cve-2020-36189

Safeguard articles tagged "cve-2020-36189" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Jackson-databind RCE via JDOM gadget (CVE-2020-36189)

CVE-2020-36189 lets attackers chain jackson-databind polymorphic deserialization with a JDOM gadget for RCE, SSRF, or XXE. Here's the mechanics and the fix.

Dec 25, 20257 min read