Threats Tagged 'ghsa-mvcx-qg6f-j67g'

1 threat

Threats Tagged 'ghsa-mvcx-qg6f-j67g'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.6	EPSS 0.4%	CVE-2026-47875Spring Batch · Deserialization of Untrusted Data Medium5.6EPSS 0.4%2026-08-27CVE Database V5CVE-2026-47875 CVE-2026-47875 is a medium severity vulnerability in Spring Batch affecting versions 5.2.0 through 5.2.6 and 6.0.0 through 6.0.4. It involves unsafe deserialization of untrusted data when using Jackson2ExecutionContextStringSerializer, allowing attackers to bypass trusted-types allowlist enforcement in JobParameterDeserializer. This can lead to arbitrary code execution via known Jackson RCE gadgets. EPSS 0.4%Vulnerability Spring #cwe-502 #ghsa-mvcx-qg6f-j67g	CVE Database V5	2026-08-27

Showing 1–1 of 1 result