No detailed analysis has been written for this CVE yet.
The KEYDAL team will publish a comprehensive analysis of this vulnerability soon.
CVE-2022-22965
Spring4Shell — Spring MVC/WebFlux RCE; Mirai botnet adopted variants.
Vulnerability Profile
CVSS Score
9.8 / 10.0
Severity
Critical
Exploitation Status
⚠ Active Exploitation
Patch Status
✓ Patch Available
Affected Software
Spring Framework 5.3.x/5.2.x
Exploitation Method
Data binding RCE
MITRE ATT&CK
T1190