spring-batch: XML External Entity Injection (XXE) when receiving XML data from untrusted sources
Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection XXE when receiving XML data from untrusted sources...