Security Advisory
CVE-2019-3773
9.8
CRITICAL
Vulnerability Description
Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
Published Date
January 18, 2019
Official Source
NIST NVD Advisory