Spring4Shell Zero-Day Vulnerability: While You’re Waiting for Your WAF

Spring4Shell CVE-2022-22965 A newly disclosed remote code execution vulnerability in Spring Core, a widely used Java framework, has been identified. Exploitation of CVE-2022-22965 has been confirmed as a means of enabling unauthenticated remote code execution on applications. Similar to the recent zero-day vulnerability identified with Log4j CVE-2021-44228, and other events including Heartbleed and Shellshock from [...]

The post Spring4Shell Zero-Day Vulnerability: While You’re Waiting for Your WAF appeared first on Security Boulevard.

industry trends product spring4shell vulnerability waf zero-day vulnerability