A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.
CVE-2019-10172 (debian_linux, jackson-mapper-asl, jboss_enterprise_application_platform, jboss_fuse, spark)
Leave a reply