| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.batch:spring-batch-core | ≥ 4.0.0.RELEASE, < 4.0.2.RELEASE≥ 4.1.0.RELEASE, < 4.1.1.RELEASE< 3.0.10.RELEASE | 4.0.2.RELEASE4.1.1.RELEASE3.0.10.RELEASE |
| spring batch | = 4.1.0≥ 4.0.0, ≤ 4.0.1≤ 3.0.9 |
Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free