CVE-2019-3774 PUBLISHED

Reported by dell · Published January 18, 2019

Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Affected Products

VendorProductVersions
SpringSpring Batch4.0, 4.1, 3.0
Mavenorg.springframework.batch:spring-batch-core0, 0
SpringSpring Batch4.0, 4.1, 3.0

Timeline

References

…and 22 more

Open in Interactive Console →