GHSA-r6j9-8759-g62wHighCVSS 7.5

Improper Restriction of XML External Entity Reference in jackson-mapper-asl

Published
February 4, 2020
Last Modified
February 15, 2023

🔗 CVE IDs covered (1)

CVE-2019-10172 →

📋 Description

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar to CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

🎯 Affected products1

  • maven/org.codehaus.jackson:jackson-mapper-asl:<= 1.9.13

🔗 References (73)