TI-2020-15666 CVE-2020-25649 · GHSA-288c-cq4h-88gq
XML external entity injection in jackson-databind
Priority MEDIUM 56
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.
RHSA-2020:4312
rh-maven35-jackson-databind security update
Released 2020-10-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-maven35-jackson-databind-2.7.6-2.12.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.12.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-maven35-jackson-databind-2.7.6-2.12.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.12.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-maven35-jackson-databind-2.7.6-2.12.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.12.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-maven35-jackson-databind-2.7.6-2.12.el7, rh-maven35-jackson-databind-javadoc-2.7.6-2.12.el7