https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:00:45.021311+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-109199 EUVD-2026-109199 2026-10-06T16:00:45.046146+00:00 EUVD-2026-109199 https://cve.radiocsirt.org/vuln/fkie_cve-2013-7315 fkie_cve-2013-7315 2026-10-06T16:00:45.046178+00:00

The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML with JAXB, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152. NOTE: this issue was SPLIT from CVE-2013-4152 due to different affected versions.

 https://cve.radiocsirt.org/vuln/ghsa-vp63-rrcm-9mph GHSA-vp63-rrcm-9mph — Missing XML Validation in Spring Framework 2026-10-06T16:00:45.046208+00:00

Affected: Maven: org.springframework:spring-oxm

The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML with JAXB, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152. NOTE: this issue was SPLIT from CVE-2013-4152 due to different affected versions.

 https://cve.radiocsirt.org/vuln/gsd-2013-7315 gsd-2013-7315 2026-10-06T16:00:45.046234+00:00 gsd-2013-7315 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-7315 Withdrawn: UBUNTU-CVE-2013-7315 2026-10-06T16:00:45.046246+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: libspring-java, Ubuntu:16.04:LTS: libspring-java, Ubuntu:18.04:LTS: libspring-java

The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML with JAXB, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152. NOTE: this issue was SPLIT from CVE-2013-4152 due to different affected versions.