CVE-2023-35116

Summary

CVE-2023-35116 is a vulnerability affecting jackson-databind versions up to 2.15.2. This issue allows an attacker to cause a denial of service or potentially other unspecified impacts by utilizing a crafted object with cyclic dependencies. However, the vendor contests the validity of this report, asserting that constructing a cyclic data structure and attempting to serialize it is an unlikely scenario for external attackers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.