CVE-2019-10172

CVE-2019-10172 https://vulners.com/cve/CVE-2019-10172 이 구성 요소/패키지의 알려진 취약하지 않은 버전이 없습니다. 대체 구성 요소나 잠재적 완화 조치를 조사하는 것이 좋습니다. 완화 1. 권장 모든 경우에 대해 com.codehaus.jackson에서 com.fasterxml.jackson으로 전환을 시도하고 com.codehaus.jackson 라이브러리를 제거하십시오. 2. 패치된 라이브러리를 사용하십시오: 참조...

ROS-20250609-01

A vulnerability in the DOMDeserializer component of the FasterXML jackson-databind library is related to an incorrect restriction of XML links to external objects. Exploitation of the vulnerability could allow an attacker, acting remotely, to conduct XXE attacks...

The vulnerability of the DOMDeserializer component in the FasterXML jackson-databind library allows attackers to execute XXE attacks.

The vulnerability of the DOMDeserializer component in the FasterXML jackson-databind library is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a remote attacker to perform XXE attacks...

Low: Red Hat Security Advisory: Red Hat Integration Tech-Preview 3 Camel K security update

An update to the Camel K operator image for Red Hat Integration tech-preview is now available. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Low. A Common...

jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity XXE attacks. The highest threat from this vulnerability is data integrity...

jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity XXE attacks. The highest threat from this vulnerability is data integrity...

PT-2020-6701

Name of the Vulnerable Software and Affected Versions FasterXML Jackson Databind affected versions not specified Description A flaw in FasterXML Jackson Databind allows vulnerability to XML external entity XXE attacks due to improper entity expansion security. The highest threat from this issue i...