CVE-2022-22965 - Spring4Shell - Spring Framework RCE
RCE via data binding on JDK 9+ with Tomcat, abusing class loader access to write a webshell.
Tags: rce, java, spring, data-binding
- Product
- Spring Framework
- Severity
- critical (CVSS 9.8)
- Published / added
- 2022-03
- Signals
- CISA KEV