CVE-2017-7525
CRITICAL 9.8EPSS 37.7%
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.
- Affected
- FasterXML · jackson-databind
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 37.72% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2018-02-06
- Updated
- 2026-10-08
Proof-of-concept exploits (15)
- Dannners/jackson-deserialization-2017-75251★ · 2023-03-28
- JavanXD/Demo-Exploit-Jackson-RCE18★ · 2019-02-21
- Nazicc/S2-0550★ · 2017-12-18
- SecureSkyTechnology/study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095106★ · 2017-12-13
- ShiftLeftSecurity/HelloShiftLeft-Scala1★ · 2025-09-05
- atul-joshi-aera/jackson-2017-75250★ · 2024-10-16
- boonyashka/scala0★ · 2025-09-10
- conikeec/helloshiftleftplay0★ · 2020-01-10
- galimba/Jackson-deserialization-PoC8★ · 2020-08-03
- hdgittest/HelloShiftLeft-Scala0★ · 2025-04-24
- hdgittest/HelloshiftLeft_scala0★ · 2025-04-23
- irsl/jackson-rce-via-spel121★ · 2018-01-09
- jault3/jackson-databind-exploit13★ · 2019-03-22
- ongamse/Scala0★ · 2025-05-14
- wahyuhadi/spel.xml0★ · 2023-03-28
Vulhub environments (1)
Security advisories
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- http://www.securityfocus.com/bid/99623
- http://www.securitytracker.com/id/1039744
- http://www.securitytracker.com/id/1039947
- http://www.securitytracker.com/id/1040360
- https://access.redhat.com/errata/RHSA-2017:1834
- https://access.redhat.com/errata/RHSA-2017:1835
- https://access.redhat.com/errata/RHSA-2017:1836
- https://access.redhat.com/errata/RHSA-2017:1837
- https://access.redhat.com/errata/RHSA-2017:1839
- https://access.redhat.com/errata/RHSA-2017:1840
- https://access.redhat.com/errata/RHSA-2017:2477
- https://access.redhat.com/errata/RHSA-2017:2546
- https://access.redhat.com/errata/RHSA-2017:2547
- https://access.redhat.com/errata/RHSA-2017:2633
- https://access.redhat.com/errata/RHSA-2017:2635
- https://access.redhat.com/errata/RHSA-2017:2636
- https://access.redhat.com/errata/RHSA-2017:2637
- https://access.redhat.com/errata/RHSA-2017:2638
- https://access.redhat.com/errata/RHSA-2017:3141
- https://access.redhat.com/errata/RHSA-2017:3454
- https://access.redhat.com/errata/RHSA-2017:3455
- https://access.redhat.com/errata/RHSA-2017:3456
- https://access.redhat.com/errata/RHSA-2017:3458
- https://access.redhat.com/errata/RHSA-2018:0294
- https://access.redhat.com/errata/RHSA-2018:0342
- https://access.redhat.com/errata/RHSA-2018:1449
- https://access.redhat.com/errata/RHSA-2018:1450
- https://access.redhat.com/errata/RHSA-2019:0910
- https://access.redhat.com/errata/RHSA-2019:2858
- https://access.redhat.com/errata/RHSA-2019:3149
- https://bugzilla.redhat.com/show_bug.cgi?id=1462702
- https://cwiki.apache.org/confluence/display/WW/S2-055
- FasterXML/jackson-databind/issues/1599
- https://lists.debian.org/debian-lts-announce/2020/01/msg00037.html
- https://lists.debian.org/debian-lts-announce/2020/08/msg00039.html
- https://security.netapp.com/advisory/ntap-20171214-0002
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902…
- https://www.debian.org/security/2017/dsa-4004
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- advisories/GHSA-qxxx-2pp7-5hmx