CVE-2016-3720

Description

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

References

https://github.com/nguyenminhduc3103/CVE_TOOL_SIGMARULE

https://github.com/advisories/GHSA-r6j9-8759-g62w

https://github.com/yafeile/CVE

https://github.com/advisories/GHSA-hmq6-frv3-4727

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184561.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS