Description
An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | edu.stanford.nlp:stanford-corenlp | < 4.4.0 | 4.4.0 | GHSA-x2p8-rgfm-qw3v |