Advanced warning: possible remote code execution (RCE) in Spring, an extremely popular Java framework

Posted on March 29, 2022 in Software Frameworks, Libraries, and Components

An unconfirmed, but possible, remote code execution vulnerability is believed to exist in Spring, an extremely popular Java framework. This issue is likely easily exploited in common configurations. If confirmed, another notice will be sent out with a severity of 'critical'. While unconfirmed, the severity has been assigned 'high'.


Continue reading