system
Describe <CVE-2018-14720>.
user
What is <CVE-2018-14720>?
assistant
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization..