CVE-2019-10172CWE-611

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries

Medium · published November 18, 2019

CVSS v3.0

5.9

EPSS

17%

Percentile

97.1

In the wild

Unconfirmed

What it is

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

The record

Technical detail

CVSS v3.0: 5.9 · MEDIUM
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.17044 · 97.1th percentile
Weakness: CWE-611 · Improper Restriction of XML External Entity Reference
Published: 2019-11-18T16:16Z

EPSS history

Timeline

18 NOV 16:16Z
A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries
cvelistv5