Archive

18 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /18 February 2019 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2019-3773

Spring Web Services XML External Entity Injection (XXE)

Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Spring Spring Web Services org.springframework.ws:spring-xml org.springframework.ws:spring-ws Maven

Jan 18, 2019