TI-2020-15666 CVE-2020-25649 · GHSA-288c-cq4h-88gq
XML external entity injection in jackson-databind
Priority MEDIUM 56
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.
RHSA-2020:4401
Red Hat JBoss Enterprise Application Platform 7.3 security update
Released 2020-10-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.3 for BaseOS-8 eap7-jackson-databind-2.10.4-1.redhat_00002.1.el8eap
- Red Hat JBoss EAP 7.3 for RHEL 6 Server eap7-jackson-databind-2.10.4-1.redhat_00002.1.el6eap
- Red Hat JBoss EAP 7.3 for RHEL 7 Server eap7-jackson-databind-2.10.4-1.redhat_00002.1.el7eap