CVE-2021-44550 - An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159)

CRITICAL

An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159)

Published Feb 23, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.27%

An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-863

Incorrect Authorization

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1244		Advisory
https://github.com/advisories/GHSA-x2p8-rgfm-qw3v		Advisory
https://github.com/stanfordnlp/CoreNLP/commit/5ee097dbede547023e88f60ed3f430ff09398b87
https://github.com/stanfordnlp/CoreNLP/issues/1222		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-44550