Lucene search
+L
Pivotal SoftwareSpring Web Services

1 matches found

CVE
CVE
added 2019/01/18 10:00 p.m.183 views

CVE-2019-3773

CVE-2019-3773 affects Spring Web Services (versions 2.4.3, 3.0.4, and other older, unsupported lines) and is due to XML External Entity (XXE) injection when processing XML from untrusted sources. The issue is rated high/critical (CVSSv3 9.8, network attack, unauthenticated, with high impact to co...

9.8CVSS9.6AI score0.0411EPSS
Save