Skip to content
OpenAdvisories

Package · Maven

org.springframework.data:spring-data-commons

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2018-1259 Public exploit

    Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references

    Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying li…

    Pivotal Spring Data Commons org.springframework.data:spring-data-commons Maven
  • Critical 9.8
    CVE-2018-1273 Exploited · Ransomware Public exploit EPSS 97%

    Spring Data Commons remote code injection vulnerability

    Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can sup…

    Spring by Pivotal Spring Framework org.springframework.data:spring-data-commons Maven
    KEV Mar 25, 2022