CVE-2020-14195

This PoC demonstrates a deserialization vulnerability in FasterXML jackson-databind (CVE-2020-14195) by exploiting JNDI injection via an LDAP endpoint. The payload triggers unsafe deserialization, leading to potential remote code execution if an attacker controls the LDAP server.

This repository contains a vulnerable version of Jackson Databind (2.9.0) that is susceptible to CVE-2020-14195, a deserialization vulnerability. The included source code and build configuration allow for testing and exploitation of the flaw.

This repository contains a vulnerable version of Jackson Databind (2.9.0) that demonstrates CVE-2020-14195, a deserialization vulnerability. The included source code and build configuration allow for testing and exploitation of the flaw.