← CVE Intelligence

CVE-2019-3774

Spring Batch XML External Entity Injection (XXE) PUBLISHED

Description (CNA)

Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Affected (CNA)

Vendor / productVersions
Spring / Spring Batchaffected 4.0 before 4.0.1.RELEASE; affected 4.1 before 4.1.0.RELEASE; affected 3.0 before 3.0.9.RELEASE

CWE

CWE-611

References

ADP enrichment

CVE

No English description supplied.