XML injection (XXE) In com.fasterxml.jackson.dataformat:jackson-dataformat-xml
Description
jackson-dataformat-xml vulnerable to XML external entity (XXE) XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 2.7.4-1 | ||
debian 14 | 2.7.4-1 | ||
debian 13 | 2.7.4-1 | ||
 maven | 2.7.4 | ||
debian 11 | 2.7.4-1 |
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1.