CVE-2016-3720

Опубликовано: 10 июн. 2016

Источник: debian

Описание

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
jackson-dataformat-xml	fixed	2.7.4-1		package

Примечания

https://github.com/FasterXML/jackson-dataformat-xml/commit/f0f19a4c924d9db9a1e2830434061c8640092cc0 (2.7.4)

Связанные уязвимости

CVE-2016-3720

CVSS3: 9.8

ubuntu

больше 9 лет назад

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

CVE-2016-3720

redhat

почти 10 лет назад

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

CVE-2016-3720

CVSS3: 9.8

nvd

больше 9 лет назад

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

GHSA-hmq6-frv3-4727

CVSS3: 9.8

github

больше 7 лет назад

jackson-dataformat-xml vulnerable to XML external entity (XXE)