CVE-2020-24616

This PoC demonstrates CVE-2020-24616, a deserialization vulnerability in Jackson Databind. It exploits unsafe deserialization via LDAP to trigger remote code execution by loading a malicious class.

This repository contains a vulnerable version of Jackson Databind (2.9.0) that demonstrates CVE-2020-24616, a deserialization vulnerability. The included source code and build configuration allow for testing and exploitation of the flaw.

This repository contains a vulnerable version of Jackson Databind (2.9.0) that can be used to demonstrate CVE-2020-24616, a deserialization vulnerability. The included source code and build configuration allow for testing and exploitation of the flaw.