CVE:CVE-2016-3720
CNNVD:CNNVD-201606-229
Data format extension for Jackson（又名jackson-dataformat-xml）是一个用于为XML和反序列化XML提供替代支持串行化POJO类的扩展模块。
Data format extension for Jackson的XmlMapper中存在安全漏洞。攻击者可利用该漏洞实施XML外部实体攻击。
solution:Upgrade fedoraproject fedora to a higher version than 24,and avoid the version 24; Upgrade fasterxml jackson-dataformat-xml to a higher version than 2.7.3,and avoid the version (,2.7.3]