Vulnerability that affects org.springframework.ws:spring-ws and org.springframework.ws:spring-xml
Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-3773US | critical9.8 | — | ||
Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data fr… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/advisories/GHSA-8222-6fc8-mhvfADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2019-3773ADVISORY
- https://pivotal.io/security/cve-2019-3773WEB
- https://www.oracle.com/security-alerts/cpuApr2021.htmlWEB
- https://www.oracle.com/security-alerts/cpujan2021.htmlWEB
- https://www.oracle.com/security-alerts/cpujul2021.htmlWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan