Lucene search
+L

2 matches found

zdt
zdt
added 2022/05/10 12:00 a.m.407 views

Spring4Shell Spring Framework Class Property Remote Code Execution Exploit

Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19, and older versions when running on JDK 9 or above and specifically packaged as a traditional WAR and deployed in a standalone Tomcat instance are vulnerable to remote code execution due to an unsafe data binding used to populate an objec...

9.8CVSS0.4AI score0.99638EPSS
SaveExploits105
Rows per page
Query Builder