org.springframework.ws:spring-ws-security vulnerabilities (TuxCare)
7 vulnerabilities.
-
org.springframework.ws:spring-ws-securityTuxCare WSS4J validation does not use configured replay cache 3.7 Low -
org.springframework.ws:spring-ws-securityTuxCare Spring WS SSRF via unvalidated WS-Addressing reply destinations 8.6 High -
org.springframework.ws:spring-ws-securityTuxCare Jaxp13 XPath XXE via StreamSource and SAXSource 8.2 High -
org.springframework.ws:spring-ws-securityTuxCare SOAP security faults leak Spring Security account state 5.3 Medium -
org.springframework.ws:spring-ws-securityTuxCare Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default 4.8 Medium -
org.springframework.ws:spring-ws-securityTuxCare X.509 authentication bypasses Spring Security account checks 5.4 Medium -
org.springframework.ws:spring-ws-securityTuxCare Wss4jSecurityInterceptor disables WS-I BSP validation by default 8.2 High