Description
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
Remediation
References
Related Vulnerabilities
phpMyAdmin Other Vulnerability (CVE-2004-2631)
WordPress Plugin File Away Multiple Unspecified Vulnerabilities (3.8.4)
Drupal Core 8.x Multiple Vulnerabilities (8.0.0 - 8.4.4)
WordPress Plugin WP Statistics Cross-Site Scripting (9.1.2)
WordPress Plugin CWIS-Antivirus Security Scanner Unspecified Vulnerability (2.3.2)