| Package | Affected versions | Patched versions |
|---|---|---|
| com.fasterxml.jackson.dataformat:jackson-dataformat-xml | ≥ 2.8.0, < 2.8.4< 2.7.8 | 2.8.42.7.8 |
| jackson-dataformat-xml | = 2.8.0= 2.8.1= 2.8.2= 2.8.3< 2.7.8 | 2.7.8 |
Versions of jackson-dataformat-xml) prior to 2.7.8 and prior to 2.8.4 allow remote attackers to conduct server-side request forgery (SSRF) attacks via vectors related to a DTD.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free