Security Advisory

CVE-2019-3772

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-01-18 22:00:00
Last updated 2024-09-16 16:23:25
Assigner dell
State PUBLISHED

Description

Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.