Spring Framework: Difference between revisions

Revision as of 06:31, 2 July 2023

Revision as of 06:33, 2 July 2023

Line 364:

==Spring4Shell vulnerability==

{{See also | Log4Shell}}

A [[remote code execution]] vulnerability affecting certain versions of Spring Framework was published in April 2022 under {{CVE|2022-22965}}. It was given the name ''Spring4Shell'' in reference to the recent [[Log4Shell]] vulnerability, both having similar proofs-of-concept in which attackers could gain shell access on vulnerable machines.<ref>{{Cite web |url=https://www.kaspersky.com/blog/spring4shell-critical-vulnerability-in-spring-java-framework/44034/ |title=Spring4Shell: critical vulnerability in Spring - Kaspersky official blog }}</ref>