Skip to content

Commit d30f036

Browse files
MaximilianTewscowtowncoder
authored andcommitted
Backport databind#2326 to 2.7 CVE-2019-12086 (#2333)
1 parent 2684204 commit d30f036

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,11 @@ public class SubTypeValidator
7777
s.add("org.jboss.util.propertyeditor.DocumentEditor");
7878
s.add("org.apache.openjpa.ee.RegistryManagedRuntime");
7979
s.add("org.apache.openjpa.ee.JNDIManagedRuntime");
80-
s.add("org.apache.axis2.transport.jms.JMSOutTransportInfo");
80+
s.add("org.apache.axis2.transport.jms.JMSOutTransportInfo");
81+
82+
// [databind#2326] (2.7.9.6): one more 3rd party gadget
83+
s.add("com.mysql.cj.jdbc.admin.MiniAdmin");
84+
8185
DEFAULT_NO_DESER_CLASS_NAMES = Collections.unmodifiableSet(s);
8286
}
8387

0 commit comments

Comments
 (0)