Praetorian Blog company blog

Spring Core on JDK9 is vulnerable to remote code execution

Update: March 31, 2022 A patch has officially been released. https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement https://tanzu.vmware.com/security/cve-2022-22965 Overview Spring Core on JDK9+ is vulnerable to remote code execution due to a bypass for CVE-2010-1622. At the time of writing, this…
Points
157
HN comments
70
Submissions
1
Cited by
0 commenters

Security & Privacy2022

On Hacker News

SubmittedTitle on HNPointsComments
Mar 30, 2022Spring Core on JDK9 is vulnerable to remote code execution by groundshark15770

More from Praetorian Blog

All 2 posts →

Related posts from the same era