Summary: Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.Published: Thursday, May 21, 2020 - 23:15cvss: 5.0