Archive

18 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /18 February 2019 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Low —

CVE-2019-3772

Spring Integration XML External Entity Injection (XXE)

Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Spring Spring Integration org.springframework.integration:spring-integration-xml org.springframework.integration:spring-integration-ws Maven

Jan 18, 2019
Low —

CVE-2019-3774

Spring Batch XML External Entity Injection (XXE)

Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Spring Spring Batch org.springframework.batch:spring-batch-core Maven

Jan 18, 2019