Article - CS341441
CVE-2017-7525 : A deserialization flaw was discovered in the jackson-databind
Modified: 24-Mar-2021
Applies To
- Windchill PDMLink 11.1 M020
Description
CVE-2017-7525 : A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.
This is a printer-friendly version of Article 341441 and may be out of date. For the latest version click CS341441