CVE-2019-3774
טרם דורגה
תיאור (מקור, אנגלית)
Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
מדדים
- EPSS — סבירות ניצול
- 3% (אחוזון 100) נכון ל-16/9/2026
- CWE
- CWE-611
מוצרים מושפעים
broadcom: spring batch
קישורים
- https://pivotal.io/security/cve-2019-3774 MitigationVendor Advisory
- https://pivotal.io/security/cve-2019-3774 MitigationVendor Advisory
- https://lists.apache.org/thread.html/r01292194daa9ed3117b34dabec0c26929f6db13b…
- https://lists.apache.org/thread.html/r0153a08177fcfac7584c7b9ea3027f1e8f18f770…
- https://lists.apache.org/thread.html/r08e7ddc354bdcbf95d88399f18b3d804865034f8…
- https://lists.apache.org/thread.html/r2349237482bcec43632d9d78d7d2804520d9a82f…
- https://lists.apache.org/thread.html/r47c7f67a3067ec09262eef0705abc42ea1b64669…
- https://lists.apache.org/thread.html/r5fbb63e405d2211c16524d33f52e3b122109d3bc…
- https://lists.apache.org/thread.html/r78645ca0eef44a276e144447fb2087db758b1fb8…
- https://lists.apache.org/thread.html/r79991aeb5d0c53c67e400e037c72758a06607752…