CVE-2021-44550

Impact

An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).

Affected packages

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/stanfordnlp/CoreNLP/issues/1222
• https://github.com/advisories/GHSA-x2p8-rgfm-qw3v
• https://nvd.nist.gov/vuln/detail/CVE-2021-44550
• https://github.com/stanfordnlp/CoreNLP/commit/5ee097dbede547023e88f60ed3f430ff09398b87