NetSight
IP …
critical9.8

CVE-2019-3774

Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from…

Impact

Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Affected products

VendorProductAffected versions
BroadcomSpring Batch
through 3.0.9
from 4.0.0 through 4.0.1
Version 4.1.0

Weakness classification

CWE-611

References