[CASSANDRA-15828] Remove jackson-mapper-asl-1.9.13 to address CVE - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Normal
Resolution: Fixed
Fix Version/s: None
Component/s: None
Labels:
None

Platform:

All
Impacts:

Security

Description

Recent scan results identified the following CVE that require this upgrade to address

https://nvd.nist.gov/vuln/detail/CVE-2019-10172

Attachments

Issue Links

causes

CASSANDRA-16056 Remove jackson-mapper-asl-1.9.13 to mitigate CVE-2019-10172

Resolved

is a clone of

CASSANDRA-15827 Upgrade to Jackson Databind 2.9.10.4 or later to address CVEs

Triage Needed

Activity

People

Assignee:: Unassigned

Reporter:: Kevin Eveker

Votes:: 1 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 21/May/20 22:49

Updated:: 11/Jan/21 10:07

Resolved:: 18/Aug/20 11:16