Security Advisory
CVE-2019-3774
9.8
CRITICAL
Vulnerability Description
Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
Published Date
January 18, 2019
Official Source
NIST NVD Advisory