https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:24:43.405227+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-107185 EUVD-2026-107185 2026-10-03T09:24:43.413131+00:00 EUVD-2026-107185 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4152 fkie_cve-2013-4152 2026-10-03T09:24:43.413177+00:00

The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.

 https://cve.radiocsirt.org/vuln/ghsa-rp4p-g69r-438x GHSA-rp4p-g69r-438x — Cross-Site Request Forgery in Spring Framework 2026-10-03T09:24:43.413234+00:00

Affected: Maven: org.springframework:spring-oxm

The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.

 https://cve.radiocsirt.org/vuln/gsd-2013-4152 gsd-2013-4152 2026-10-03T09:24:43.413262+00:00 gsd-2013-4152 https://cve.radiocsirt.org/vuln/rhsa-2014:0212 RHSA-2014:0212 — Red Hat Security Advisory: Red Hat JBoss SOA Platform 5.3.1 update 2026-10-03T09:24:43.413275+00:00

Java: XML signature spoofing Framework: XML External Entity (XXE) injection flaw

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4152 Withdrawn: UBUNTU-CVE-2013-4152 2026-10-03T09:24:43.413294+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: libspring-java

The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.