2 matches found
Spring4Shell Spring Framework Class Property Remote Code Execution Exploit
Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19, and older versions when running on JDK 9 or above and specifically packaged as a traditional WAR and deployed in a standalone Tomcat instance are vulnerable to remote code execution due to an unsafe data binding used to populate an objec...
9.8CVSS0.4AI score0.99638EPSS
SaveExploits105
20