Описание
jackson-dataformat-xml vulnerable to server side request forgery (SSRF)
Versions of jackson-dataformat-xml) prior to 2.7.8 and prior to 2.8.4 allow remote attackers to conduct server-side request forgery (SSRF) attacks via vectors related to a DTD.
Пакеты
com.fasterxml.jackson.dataformat:jackson-dataformat-xml
< 2.7.8
2.7.8
com.fasterxml.jackson.dataformat:jackson-dataformat-xml
>= 2.8.0, < 2.8.4
2.8.4
Связанные уязвимости
XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery (SSRF) attacks via vectors related to a DTD.
XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery (SSRF) attacks via vectors related to a DTD.
XmlMapper in the Jackson XML dataformat component (aka jackson-datafor ...