Technical Advisory · Retrospective 2022
Spring4Shell depends on how the application is deployed
Assess CVE-2022-22965 using the actual runtime, Spring dependencies, packaging and servlet container.
CVE-2022-22965
Technical coverage, source documents and official vulnerability records.
FISRO coverage
Read the relevant deployment conditions, remediation steps and limits of the evidence in the linked material.
Sources from this coverage
- CVE-2022-22965: Spring Framework RCE via data bindingSpring maintainers
- Spring Framework RCE: early announcementSpring maintainers