Security Advisory
CVE-2019-3774
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.