| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.integration:spring-integration-ws | ≥ 5.0.0, < 5.0.11≥ 5.1.0, < 5.1.2< 4.3.19 | 5.0.115.1.24.3.19 |
| org.springframework.integration:spring-integration-xml | ≥ 5.0.0, < 5.0.11≥ 5.1.0, < 5.1.2< 4.3.19 | 5.0.115.1.24.3.19 |
| retail customer management and segmentation foundation | = 16.0= 17.0= 18.0 | |
| spring integration | ≥ 5.0.0, ≤ 5.0.10≥ 5.1.0, ≤ 5.1.1≤ 4.3.18 |
Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free