CVE-2016-3720

package com; import com.fasterxml.jackson.dataformat.xml.JacksonXmlModule; import com.fasterxml.jackson.dataformat.xml.XmlMapper; import java.io.IOException; import java.io.InputStream; public class Demo { public static void main(String[] args) throws IOException { InputStream input = Demo.class.getResourceAsStream("/xxe.xml"); JacksonXmlModule module = new JacksonXmlModule(); XmlMapper mapper = new XmlMapper(module); mapper.readValue(input, Object.class); } }