GitHub Advisoryadvisory · Maven

GHSA-r6j9-8759-g62w Improper Restriction of XML External Entity Reference in jackson-mapper-asl

HIGH Published 2020-02-04 Modified 2021-03-26 Official page ↗
Aliases
CVE-2019-10172
Ecosystem
Maven
Packages
org.codehaus.jackson:jackson-mapper-asl
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-611
Reviewed
2020-02-04

Affected packages

• Maven org.codehaus.jackson:jackson-mapper-asl: <= 1.9.13 (no fix yet)

Description

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar to CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

Related

Alias · CVE (1)

  • CVE-2019-10172 A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. vulnerability

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References