Vulnerability Bulletins |
How to hunt for Spring4Shell and Java Spring Vulnerabilities |
|
| Affected software | VMWare |
|
This article was authored by Stephane List and Abby Costin Overview On March 29, 2022, two new CVEs were discovered in the Spring Core java library: CVE-2022-22963 : In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality, it is possible for a user to provide a specially crafted SpEL … ContinuedThe post How to hunt for Spring4Shell and Java Spring Vulnerabilities appeared first on VMware Security Blog. More info: https://blogs.vmware.com/security/2022/04/how-to-hunt-for-spring4shell-and-java-spring-vulnerabilities.html?utm_source=rss&utm_medium=rss&utm_campaign=how-to-hunt-for-spring4shell-and-java-spring-vulnerabilities |
|