CVE-2019-3773 Vulnerability Details

  /     /     /  

CVE-2019-3773 Metadata Quick Info

CVE Published: 18/01/2019 | CVE Updated: 17/09/2024 | CVE Year: 2019
Source: dell | Vendor: Spring | Product: Spring Web Services
Status : PUBLISHED

---

CVE-2019-3773 Description

Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-611
CWE Name: CWE-611: XML External Entities (XXE)
Source: Spring

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).