Lucene search

CVE-2010-1622

🗓️ 21 Jun 2010 16:01:30Reported by redhatType

cve🔗 web.nvd.nist.gov👁 186 Views🌐 1 Media mentions

SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file

Reporter	Title	Published	Views	Family All 35
exploitpack	Spring Framework - Arbitrary code Execution	18 Jun 201000:00	–	exploitpack
Exploit DB	Spring Framework - Arbitrary code Execution	18 Jun 201000:00	–	exploitdb
seebug.org	Spring Framework arbitrary code execution	1 Jul 201400:00	–	seebug
seebug.org	Spring Framework class.classLoader类远程代码执行漏洞	21 Jun 201000:00	–	seebug
OSV	Improper Control of Generation of Code ('Code Injection') in Spring Framework	17 May 202203:28	–	osv
OSV	Red Hat Security Advisory: JBoss Web Framework Kit 1.0.0 removal	15 Sep 202418:34	–	osv
securityvulns	CVE-2010-1622: Spring Framework execution of arbitrary code	20 Jun 201000:00	–	securityvulns
securityvulns	Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)	20 Jun 201000:00	–	securityvulns
securityvulns	Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities	2 Nov 201500:00	–	securityvulns
Prion	Code injection	21 Jun 201016:30	–	prion

Nvd

Node

oracle fusion_middlewareMatch7.6.2

oracle fusion_middlewareMatch11.1.1.6.1

oracle fusion_middlewareMatch11.1.1.8.0

Node

springsource spring_frameworkMatch2.5.0

springsource spring_frameworkMatch2.5.1

springsource spring_frameworkMatch2.5.2

springsource spring_frameworkMatch2.5.3

springsource spring_frameworkMatch2.5.4

springsource spring_frameworkMatch2.5.5

springsource spring_frameworkMatch2.5.6

springsource spring_frameworkMatch2.5.7

springsource spring_frameworkMatch3.0.0

springsource spring_frameworkMatch3.0.1

springsource spring_frameworkMatch3.0.2

Source	Link
oracle	www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
geronimo	www.geronimo.apache.org/22x-security-report.html
secunia	www.secunia.com/advisories/43087
vupen	www.vupen.com/english/advisories/2011/0237
springsource	www.springsource.com/security/cve-2010-1622
securitytracker	www.securitytracker.com/id/1033898
securityfocus	www.securityfocus.com/bid/40954
secunia	www.secunia.com/advisories/41025
geronimo	www.geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html
redhat	www.redhat.com/support/errata/RHSA-2011-0175.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Jun 2010 16:30Current

9.5High risk

Vulners AI Score9.5

CVSS26

EPSS0.039

CWE-94