Description
XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.
Remediation
References
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184561.html
Related Vulnerabilities
CVE-2019-10474 Vulnerability in maven package org.jenkins-ci.plugins:global-post-script
CVE-2020-15087 Vulnerability in maven package io.prestosql:presto-main
CVE-2018-8006 Vulnerability in maven package org.apache.activemq:activemq-web-console
CVE-2022-45398 Vulnerability in maven package org.zeroturnaround:cluster-stats
CVE-2021-43116 Vulnerability in maven package com.alibaba.nacos:nacos-client