Spring Web Services vulnerabilities

1 known vulnerability affecting spring/spring_web_services.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2019-3773CRITICALCVSS 9.8≥ 3.0, < v3.0.4.RELEASE≥ 2.4, < v2.4.3.RELEASE2019-01-18

CVE-2019-3773 [CRITICAL] CWE-611 CVE-2019-3773: Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, we Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.