Description
XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.
Remediation
References
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184561.html
Related Vulnerabilities
CVE-2019-19919 Vulnerability in maven package org.webjars:handlebars
CVE-2020-25724 Vulnerability in maven package io.quarkus:quarkus-resteasy-reactive-parent-aggregator
CVE-2021-38384 Vulnerability in npm package serverless-offline
CVE-2016-10531 Vulnerability in maven package org.webjars.bower:marked
CVE-2015-5169 Vulnerability in maven package org.apache.struts:struts2-core