Spring Framework
criticalCVSS 9.8
Spring4Shell: data binding to class loader properties enables remote code execution.
Dampak
Unauthenticated code execution on Spring MVC applications running on Tomcat.
Perbaikan
Upgrade Spring Framework to 5.3.18 / 5.2.20 or later, or apply the documented workaround.
Referensi resmi
https://nvd.nist.gov/vuln/detail/CVE-2022-22965Apakah situs Boss terdampak?
VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2022-22965.
Jalankan audit gratis