https://www.systemtek.co.uk/2018/03/fasterxml-jackson-databind-objectmapper-readvalue-method-blacklist-bypass-code-execution-vulnerability/
FasterXML jackson-databind ObjectMapper readValue Method Blacklist Bypass Code Execution Vulnerability