org.springframework.integration:spring-integration-samples (1.0.2.sr1) potentially affected by CVE-2019-3772 via org.springframework.integration:spring-integration-xml (1.0.2.sr1)

🗓️ 25 Jan 2019 16:18:49Reported by Vulners OSVType

vulnersosv🔗 osv.dev

Potential vulnerability in spring-integration-samples via spring-integration-xml.

Reporter	Title	Published	Views	Family All 31
BDU FSTEC	The vulnerability of the software platform for integrating Spring Integration corporate applications lies in improper restrictions on XML references to external objects. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	30 Apr 201900:00	–	bdu_fstec
CVE	CVE-2019-3772	18 Jan 201922:00	–	cve
Cvelist	CVE-2019-3772 Spring Integration XML External Entity Injection (XXE)	18 Jan 201922:00	–	cvelist
EUVD	EUVD-2019-0197	7 Oct 202500:30	–	euvd
Github Security Blog	Improper Restriction of XML External Entity Reference in org.springframework.integration:spring-integration-ws and org.springframework.integration:spring-integration-xml	25 Jan 201916:18	–	github
Mend	CVE-2019-3772	18 Jan 201922:00	–	mend
NVD	CVE-2019-3772	18 Jan 201922:29	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2019	16 Apr 201900:00	–	oracle
OSV	GHSA-WR5R-M8PC-85J9 Improper Restriction of XML External Entity Reference in org.springframework.integration:spring-integration-ws and org.springframework.integration:spring-integration-xml	25 Jan 201916:18	–	osv
Prion	Xxe	18 Jan 201922:29	–	prion

30 Nov 2024 05:27Current

CVSS 27.5

CVSS 39.8

EPSS0.03002

spring-integration-samples spring-integration-xml CVE-2019-3772