CVE-2022-22965

CVE-2022-22965 Spring4Shell-PoC 版本 Spring Framework 5.2.20 和 5.3.18 修复版本: Spring Framework 5.3.18 和 5.2.20 Spring Boot 2.6.6 和 2.5.12 详细信息 Spring Core 是 Spring Framework 的核心组件，它是构建 Spring Framework 生态系统中其他组件（如 Spring MVC、Spring Boot、Spring WebFlux）的基础。利用代码在以下条件下可执行： JDK 9 或更高版本 Apache Tomcat 运行...

UBUNTU-CVE-2022-22965

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is...