Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML exte…
CVSS 3.0HIGH 7.5·Network·No auth·No interaction·EPSS 0.04843·Published 2018-05-11·Fixed in 1.13.12, 2.0.7CWE-611