Debian/jackson-dataformat-xml: high 8.6
XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery (SSRF) attacks via vec
Action: Upgrade jackson-dataformat-xml to 2.8.5-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.5-1 | - |
Fixed versions
| 2.8.5-1 |
Sources
- osv: DEBIAN-CVE-2016-7051#Debian:13/jackson-dataformat-xml
- https://security-tracker.debian.org/tracker/CVE-2016-7051
published · modified · JSON