Best of 2022: Spring4Shell: What Happened, Who’s Vulnerable and How to Mitigate

The newly discovered vulnerability in the popular Java Spring framework, dubbed Spring4Shell, is all over the cyber news feeds today. Here, the Salt Labs team looks to clear up some confusion, explain what Spring4Shell really is, share who might be impacted, and offer tips for mitigating your risk. (Note, a robust debate has already emerged over whether “Spring4Shell” or “SpringShell” is correct – for now, we’re following the more common convention.)

What Happened?

On March 29, 2022, a Chinese researcher …

best of best of 2022 featured salt security security boulevard (original) spotlight spring spring4shell vulnerable