Spring4Shell (CVE-2022-22965): details and mitigations

🗓️ 04 Apr 2022 15:30:36Reported by AMRType

Critical Spring4Shell (CVE-2022-22965) allows remote code execution, similar to Log4Shell threat. Also, CVE-2022-22963 enables code injection through Spring Expression Language

Reporter	Title	Published	Views	Family All 1805
GithubExploit	Exploit for Code Injection in Vmware Spring_Framework	31 Mar 202219:19	–	githubexploit
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	17 Dec 202108:32	–	githubexploit
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	11 Dec 202116:08	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Spring_Framework	20 Jun 202311:45	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Spring_Framework	4 Apr 202210:37	–	githubexploit
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	15 Dec 202113:14	–	githubexploit
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	11 Mar 202212:43	–	githubexploit
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	19 Mar 202615:19	–	githubexploit
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	7 Mar 202410:04	–	githubexploit
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	12 Dec 202113:59	–	githubexploit

04 Apr 2022 15:30Current

0.7Low risk

Vulners AI Score0.7

EPSS0.99999