Description
An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).
Remediation
References
https://github.com/stanfordnlp/CoreNLP/issues/1222
Related Vulnerabilities
CVE-2022-25301 Vulnerability in npm package jsgui-lang-essentials
CVE-2016-10707 Vulnerability in maven package org.webjars.bower:jquery
CVE-2019-25102 Vulnerability in npm package simple-markdown
CVE-2020-7690 Vulnerability in maven package org.webjars.npm:jspdf
CVE-2021-46877 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind