Loading
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.
Use CWE-502, Netapp vendor hub and Cloud Backup product page to widen CVE-2020-36184 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2023-28656, CVE-2021-0156 and CVE-2021-0117 for nearby disclosures in the same product family.