Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ssainz

#26049of 53,634
9.8Total CVSS
Vulnerabilities · 1
PT-2020-8878
9.8
2020-05-21
Jodd · Jodd · CVE-2018-21234
**Name of the Vulnerable Software and Affected Versions** Jodd versions prior to 5.0.4 **Description** The issue concerns the deserialization of untrusted JSON data when the setClassMetadataName is set. This allows for potential exploitation. **Recommendations** For versions prior to 5.0.4, update to version 5.0.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the setClassMetadataName function to minimize the risk of exploitation.