GHSA-hmq6-frv3-4727

ghsaUSosv

jackson-dataformat-xml vulnerable to XML external entity (XXE)

view advisory published 2018-10-18Licence: CC-BY-4.0

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2016-3720US	critical9.8	2.78% (86th)	—	2016-06-10
XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown v…

references

External citations — patches, advisories, analysis.

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184561.htmlWEB
https://github.com/advisories/GHSA-hmq6-frv3-4727ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2016-3720ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan