{"action":"Upgrade com.fasterxml.jackson.dataformat:jackson-dataformat-xml to 2.7.8 (2.7.x) or 2.8.4 (2.8.x) or later.","affected":[{"fixed":"2.7.8","introduced":"0"},{"fixed":"2.8.4","introduced":"2.8.0"}],"component":"com.fasterxml.jackson.dataformat:jackson-dataformat-xml","cve_ids":["CVE-2016-7051"],"ecosystem":"Maven","epss":0.02356,"exploited":false,"fixed_versions":["2.7.8","2.8.4"],"ghsa_id":"GHSA-7c2r-3jqf-c9rw","id":"tcs_01M5N8J24J0RKTF3NB5TCBPX92","modified_at":"2023-11-08T03:58:34.381588Z","published_at":"2018-10-18T17:43:28Z","references":["https://osv.dev/vulnerability/GHSA-7c2r-3jqf-c9rw","https://nvd.nist.gov/vuln/detail/CVE-2016-7051","https://github.com/FasterXML/jackson-dataformat-xml/issues/211","https://bugzilla.redhat.com/show_bug.cgi?id=1378673","https://github.com/FasterXML/jackson-dataformat-xml","https://github.com/advisories/GHSA-7c2r-3jqf-c9rw","http://www.securityfocus.com/bid/97688"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-7c2r-3jqf-c9rw","url":"https://osv.dev/vulnerability/GHSA-7c2r-3jqf-c9rw"}],"summary":"jackson-dataformat-xml vulnerable to server side request forgery (SSRF)"}