Critical severity9.8OSV Advisory· Published Jan 4, 2019· Updated Jun 17, 2026

CVE-2019-5312

Description

An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.github.binarywang:weixin-java-commonMaven	< 3.3.2.B	3.3.2.B

Affected products

Wechat Group/WxjavaOSV
Range: 1.0.0, v1.1.1, v1.1.2, …
ghsa-coords
pkg:maven/com.github.binarywang/weixin-java-common
Range: < 3.3.2.B
Wxjava Project/Wxjava
cpe:2.3:a:wxjava_project:wxjava:*:*:*:*:*:*:*:*
Range: <3.4.0

Patches

Vulnerability mechanics

References

github.com/Wechat-Group/WxJava/issues/903nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-h755-h99p-9ffvghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-5312ghsaADVISORY
github.com/Wechat-Group/WxJava/commit/8ec61d1328f50e23cd14285a950ca57a088b32b2ghsaWEB
github.com/Wechat-Group/WxJava/issues/903ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000