Lucene search

K
osvGoogleOSV:GHSA-HMQ6-FRV3-4727
HistoryOct 18, 2018 - 5:43 p.m.

jackson-dataformat-xml vulnerable to XML external entity (XXE)

2018-10-1817:43:16
Google
osv.dev
20

0.002 Low

EPSS

Percentile

60.0%

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.