CVE-2017-7525 -- com.fasterxml.jackson.core:jackson-databind

[ruebot]

GitHub alert:

CVE-2017-7525 More information
high severity
Vulnerable versions: >= 2.8.0, < 2.8.9
Patched version: 2.8.9

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.

https://nvd.nist.gov/vuln/detail/CVE-2017-7525