GHSA-hmq6-frv3-4727

Опубликовано: 18 окт. 2018

Источник: github

Github: Прошло ревью

CVSS3: 9.8

Описание

jackson-dataformat-xml vulnerable to XML external entity (XXE)

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

Ссылки

Пакеты

Наименование

com.fasterxml.jackson.dataformat:jackson-dataformat-xml

maven

Затронутые версииВерсия исправления

< 2.7.4

2.7.4

EPSS

Процентиль: 26%

0.0009

Низкий

9.8 Critical

CVSS3

CVE ID

CVE-2016-3720

Дефекты

CWE-611

Связанные уязвимости

CVE-2016-3720

CVSS3: 9.8

ubuntu

больше 9 лет назад

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

CVE-2016-3720

redhat

почти 10 лет назад

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

CVE-2016-3720

CVSS3: 9.8

nvd

больше 9 лет назад

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

CVE-2016-3720

CVSS3: 9.8

debian

больше 9 лет назад

XML external entity (XXE) vulnerability in XmlMapper in the Data forma ...

EPSS

Процентиль: 26%

0.0009

Низкий

9.8 Critical

CVSS3

CVE ID

CVE-2016-3720

Дефекты

CWE-611