Description
XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.
Remediation
References
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184561.html
Related Vulnerabilities
CVE-2019-16148 Vulnerability in maven package org.sakaiproject:chat-base
CVE-2019-10768 Vulnerability in npm package angular
CVE-2018-19056 Vulnerability in maven package org.webjars.npm:editor.md
CVE-2019-19771 Vulnerability in npm package ecruve
CVE-2019-10346 Vulnerability in maven package org.jenkins-ci.plugins:embeddable-build-status