org.springframework:spring-oxm@4.0.4.RELEASE vulnerabilities
latest version
7.0.0
latest non vulnerable version
first published
15 years ago
latest version published
11 days ago
licenses detected
- [0,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.springframework:spring-oxm package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.springframework:spring-oxm is a Spring Object/XML Marshalling library. Affected versions of this package are vulnerable to Denial of Service (DoS). It does not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file. How to fix Denial of Service (DoS)? Upgrade | [3.2.0.RELEASE,3.2.14.RELEASE)[4.0.0.RELEASE,4.1.7.RELEASE) |
org.springframework:spring-oxm is a Spring Object/XML Marshalling library. Affected versions of this package are vulnerable to XML External Entity (XXE) Injection. This is due to not disabling the resolution of URI references by default in a DTD declaration. This occurs only when processing user provided XML documents. How to fix XML External Entity (XXE) Injection? Upgrade | [3.0.0.RELEASE,3.2.9.RELEASE)[4.0.0.RELEASE,4.0.5.RELEASE) |