VULNERABILITY INTELLIGENCE
CVE-2019-3774
CVSS score9.8 CRITICAL
EPSS probability3.06%
CISA KEVNot currently listed
Published2019-01-18
Last modified2026-09-01
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
Weakness classification
- CWE-611: Improper Restriction of XML External Entity Reference