Re:A Technical Analysis of How Spring4Shell (CVE-2022-22965)...
by PeekPoke on Thursday March 31, 2022 @02:34PM
(#30870720)
That's a good technical write-up. I wonder how much of an issue this CVE will be compared to Log4Shell....
[ Parent
| on HN ]
Re:A Technical Analysis of How Spring4Shell (CVE-2022-22965)...
by cws on Thursday March 31, 2022 @02:39PM
(#30870775)
Depends a lot on how many Spring apps out there have the prereqs to be vulnerable. The widespread nature of Log4Shell is what made it “worse” than other RCE vulns. I don’t have a sense of how many vulnerable instances of this one might be out there but the number could be enormous.