title: Spring Integration XML External Entity Injection (XXE)
description: Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources.
problem types: CWE-611: XML External Entities (XXE)
affected:
{
product: Spring Integration
vendor: Spring
versions:
lessThan: v5.0.10.RELEASE, status: affected, version: 5.0, versionType: custom
lessThan: v5.1.1.RELEASE, status: affected, version: 5.1, versionType: custom
lessThan: v4.3.18.RELEASE, status: affected, version: 4.3, versionType: custom
}