Vulnerabilities > Fasterxml > Jackson Dataformat XML > 2.7.6

DATE CVE VULNERABILITY TITLE RISK
2017-04-14 CVE-2016-7051 Server-Side Request Forgery (SSRF) vulnerability in Fasterxml Jackson-Dataformat-Xml
XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery (SSRF) attacks via vectors related to a DTD.
network
low complexity
fasterxml CWE-918
5.0