Skip to content
OpenAdvisories

Product · Spring by VMware

Spring Batch

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2020-5411

    Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"

    When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with glo…

    Spring by VMware Spring Batch org.springframework.batch:spring-batch-core Maven