Lucene search
+L
FasterxmlJackson-dataformat-xml*

1 matches found

CVE
CVE
added 2017/04/14 6:0 p.m.109 views

CVE-2016-7051

CVE-2016-7051 affects jackson-dataformat-xml (XmlMapper). The vulnerability is a server-side request forgery (SSRF) flaw related to DTD handling, present in XmlMapper before 2.7.8 and in 2.8.x before 2.8.4. Impact is described as potential SSRF; exploit details are not provided in the initial doc...

8.6CVSS8.7AI score0.02356EPSS
Save