A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries.

Summary

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

Timeline

1. Nov 18, 2019, 4:16 PM UTCCVE published
2. Aug 4, 2024, 10:10 PM UTCRecord last updated
3. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• Redhat jackson-mapper-asl

  1.9.x

• org.codehaus.jackson:jackson-mapper-aslMaven

  through 1.9.13

References 26