Spring Framework Multiple XML Entity References Information Disclosure Vulnerabilities

Multiple vulnerabilities have been identified in Spring Framework, which can be exploited by malicious people to disclose potentially sensitive information.

The vulnerabilities are caused due to an error when processing XML data, which can be exploited to e.g. disclose contents of certain local files by sending specially crafted XML data including external entity references.