5979 matches found
Jackson Framework enableDefaultTyping method deserialization vulnerability
Jackson is an open source java serialization and deserialization tools , you can serialize java objects into xml and json format strings or two kinds of files deserialized into the corresponding object . Jackson framework enableDefaultTyping method there is a Java deserialization code execution...
DEBIAN-CVE-2016-7051
XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...
CVE-2016-7051
XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...
UBUNTU-CVE-2016-7051
XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...
Server side request forgery (ssrf)
XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...
CVE-2016-7051
XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...
CVE-2016-7051
XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...
CVE-2016-7051
CVE-2016-7051 affects jackson-dataformat-xml (XmlMapper). The vulnerability is a server-side request forgery (SSRF) flaw related to DTD handling, present in XmlMapper before 2.7.8 and in 2.8.x before 2.8.4. Impact is described as potential SSRF; exploit details are not provided in the initial doc...
CVE-2016-7051
XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...
ai.grakn:grakn-dist (>=0.7.0, <=0.17.0), ai.grakn:grakn-engine (>=0.6.1, <=0.18.0) +1010 more potentially affected by CVE-2016-7051 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.0.0-rc2, <=2.7.7)
com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.0.0-rc2, =0.7.0, =0.6.1, =0.6.1, =0.7.0, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.6.1, =0.16.0, =0.1.0, =0.1-12, =0.1-12, =0.1-12, =0.1-16 and more Source cves: CVE-2016-7051 Source advisory: MEND:CVE-2016-7051...
cn.home1:oss-eureka (>=1.0.6.oss, <=1.0.7.oss), com.ahome-it:ahome-tooling-server-core (>=1.1.4-release, <=1.1.16-release) +172 more potentially affected by CVE-2016-7051 via com.fasterxml.jackson.dataformat:jackson-dataformat-xml (>=2.8.0, <=2.8.3)
com.fasterxml.jackson.dataformat:jackson-dataformat-xml MAVEN version =2.8.0, =1.0.6.oss, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.4-release, =1.1.8-release, =0.0.1, =3.1, =3.5.1 and more Source cves: CVE-2016-7051 Source advisory: MEND:CVE-2016-7051...
CVE-2016-7051
XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...
PT-2017-9078
Name of the Vulnerable Software and Affected Versions jackson-dataformat-xml versions 2.7.0 through 2.7.7 jackson-dataformat-xml versions 2.8.0 through 2.8.3 Description The issue allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD. This can be...
CVE-2016-7051: Improper Restriction of XML External Entity Reference
XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...
PT-2017-4061
Name of the Vulnerable Software and Affected Versions jackson-databind versions prior to 2.6.7.1 jackson-databind versions prior to 2.7.9.1 jackson-databind versions prior to 2.8.9 jackson-databind versions 2.0.0 through 2.9.5 Description A deserialization flaw in the jackson-databind library is...
Multiple Remote Code Execution Vulnerabilities in Apache Camel Java Deserialization
Apache Camel is the United States Apache Apache Software Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern, referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , an...
Remote code execution
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks...
CVE-2016-8749
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks...
CVE-2016-8749
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks...
com.github.camel-labs:camel-labs-iot-cloudlet-document-driver (0.1.0), com.github.camel-labs:camel-labs-iot-cloudlet-geofencing (0.1.0) +104 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.10.0, <=2.16.4)
org.apache.camel:camel-jackson MAVEN version =2.10.0, =0.1, =0.0.9, =0.0.19, =0.0.8, =0.0.16, =0.0.17, =0.0.16, =1.5, =1.5, =1.5, =1.5, =1.9.3 - edu.amherst.acdc:acrepo-template-mustache 1.0.0 and more Source cves: CVE-2016-8749 Source advisory: MEND:CVE-2016-8749...