CVE-2019-3773

Source

https://nvd.nist.gov/vuln/detail/CVE-2019-3773

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-3773.json

Aliases

• GHSA-8222-6fc8-mhvf

Published

2019-01-18T22:29:01Z

Modified

2023-12-27T16:46:21.411552Z

Details

Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

References

• https://pivotal.io/security/cve-2019-3773
• https://security.netapp.com/advisory/ntap-20231227-0011/
• https://www.oracle.com//security-alerts/cpujul2021.html
• https://www.oracle.com/security-alerts/cpujan2021.html
• https://www.oracle.com/security-alerts/cpuApr2021.html