It was recently confirmed that Spring4Shell has at least one RCE vulnerability in the Spring framerwork. VMWare has published a CVE-2022-22965:https://tanzu.vmware.com/security/cve-2022-22965.
You can read Spring’s public announcements here: https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement. There is another article with in-depth analysis on how to test and patch for the weakness here: https://www.lunasec.io/docs/blog/spring-rce-vulnerabilities/.
| Info |
|---|
Changelog Initial publication 20:11 CET |
Is Kantega SSO Enterprise affected?
...
Running JDK 9 or higher
Apache Tomcat as the Servlet container
Packaged as WAR
spring-webmvc or spring-webflux dependency:
Uses Spring MVC (5.3.15 and at least down to 4.3.0, possibly further)
Endpoint using @RequestMapping, aka. Spring parameter binding
Request parameter is of type object which maps to a POJO
Vulnerable: @NotNull DataObject data
Not vulnerable: @NotNull String string
...
| Info |
|---|
Changelog
|