CVE-2023-28949: IBM Engineering Requirements Management cross-site request forgery

First published: Wed Feb 28 2024(Updated: )

FasterXML jackson-databind is vulnerable to a denial of service, caused by an error when using JDK serialization to serialize and deserialize JsonNode values. By sending a specially crafted request, an attacker could exploit this vulnerability to cause a denial of service.

Credit: psirt@us.ibm.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/weakness
• agent/title
• agent/type
• agent/references
• agent/first-publish-date
• agent/description
• agent/severity
• agent/author
• agent/event
• collector/ibm-support
• source/IBM
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• agent/tags
• collector/nvd-api
• source/NVD
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/trending
• vendor/ibm
• canonical/ibm ibm® engineering requirements management doors
• version/ibm ibm® engineering requirements management doors/9.7.2.7
• canonical/ibm ibm® engineering requirements management doors web access
• version/ibm ibm® engineering requirements management doors web access/9.7.2.7
• canonical/ibm engineering requirements management doors
• version/ibm engineering requirements management doors/9.7.2.7
• canonical/ibm engineering requirements management doors web access
• version/ibm engineering requirements management doors web access/9.7.2.7