CVE-2019-3774

—

CVSS 3.0

9.8 critical

EPSS

3%p87

Published

Jan 18, 2019 (Jan 18, 2019)

Modified

Sep 1, 2026

Description

Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Vendors: broadcom
Products: spring batch
Weakness: CWE-611
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news0 stories

No ingested article mentions this CVE yet.