- Vendor / Project
- VMware
- Product
- Spring Framework
- Date added
- Apr 4, 2022
- Due date
- Apr 25, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-94
Description
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
Required action
Apply updates per vendor instructions.