The vulnerability of the Spring Framework software platform, related to improper code generation management, allows attackers to execute arbitrary code.

🗓️ 31 Aug 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

Spring Framework vulnerability allows code execution from improper code generation via crafted jar.

Reporter	Title	Published	Views	Family All 40
Gitee	Exploit for Code Injection in Vmware Spring_Framework	5 May 202217:21	–	gitee
GithubExploit	Exploit for Code Injection in Vmware Spring_Framework	5 Apr 202220:34	–	githubexploit
GithubExploit	Exploit for Code Injection in Oracle Fusion_Middleware	31 Mar 202208:06	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Spring_Framework	29 Apr 202209:58	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Spring_Framework	31 Mar 202216:14	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Spring_Framework	19 May 202223:16	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
Information Security Automation	Spring4Shell, Spring Cloud Function RCE and Spring Cloud Gateway Code Injection	3 Apr 202200:15	–	avleonov
Broadcom	BSA-2022-1770	5 Apr 202200:00	–	broadcom

Vulners

Node

pivotal_software spring_frameworkRange2.5.0–2.5.6.sec02

OR

pivotal_software spring_frameworkRange2.5.7–2.5.7.sr01

OR

pivotal_software spring_frameworkRange3.0.0–3.0.3

Source	Link
broadcom	www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1770
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-1622
securityfocus	www.securityfocus.com/archive/1/511877
securityfocus	www.securityfocus.com/bid/40954
securitytracker	www.securitytracker.com/id/1033898
springsource	www.springsource.com/security/cve-2010-1622
exploit-db	www.exploit-db.com/exploits/13918
web	www.web.nvd.nist.gov/view/vuln/detail

30 Apr 2026 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 26

CVSS 36.3

EPSS0.52003

Spring Framework code execution improper code generation crafted jar