Package · Maven

org.springframework.batch:spring-batch-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.1

CVE-2020-5411

Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"

When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with glo…

Spring by VMware Spring Batch org.springframework.batch:spring-batch-core Maven

Jun 11, 2020
Low —

CVE-2019-3774

Spring Batch XML External Entity Injection (XXE)

Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Spring Spring Batch org.springframework.batch:spring-batch-core Maven

Jan 18, 2019