Description
An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).
Remediation
References
https://github.com/stanfordnlp/CoreNLP/issues/1222
Related Vulnerabilities
CVE-2022-38179 Vulnerability in maven package io.ktor:ktor-utils
CVE-2021-33813 Vulnerability in maven package org.jdom:jdom
CVE-2020-7680 Vulnerability in npm package docsify
CVE-2012-0391 Vulnerability in maven package com.opensymphony:xwork-core
CVE-2021-23384 Vulnerability in npm package koa-remove-trailing-slashes