CVE-2016-3720

Critical

Published: 10/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The XXE (XML External Entity) vulnerability in XmlMapper in the Data format extension for Jackson (jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

Risk Assessment

Organizations may be exposed to various attacks that could lead to data disclosure or other undesirable effects.

Recommendation

It is recommended to update to the latest version of Jackson to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.