CVE-2020-35728
HIGHjackson-databind 2.9.0-2.9.10.7 - Deserialization of Untrusted Data via JNDIConnectionPool
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2020-35728. PoCs published by Al1ex, dawetmaster, andikahilmy.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2020-35728, demonstrating deserialization-based RCE in FasterXML jackson-databind via the JNDIConnectionPool gadget. The PoC includes Maven dependencies and Java code to trigger the vulnerability.
Description
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
Exploits (3)
This repository contains a functional exploit for CVE-2020-35728, demonstrating deserialization-based RCE in FasterXML jackson-databind via the JNDIConnectionPool gadget. The PoC includes Maven dependencies and Java code to trigger the vulnerability.
This repository contains a vulnerable version of Jackson Databind (2.9.0) that can be used to demonstrate CVE-2020-35728, a deserialization vulnerability. The included source code and build configuration allow for testing and exploitation of the flaw.
This repository contains a functional exploit for CVE-2020-35728, a deserialization vulnerability in Jackson Databind. The provided code includes modified Jackson Databind source files to demonstrate the vulnerability, along with scripts to compile and run the exploit.
References (10)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H