Date：2022/04/08

【Security Vulnerability Warning】Spring Framework exists Spring4shell high-risk security vulnerability (CVE-2022-22965), please confirm and update as soon as possible!

Subject: Spring Framework exists Spring4shell high-risk security vulnerability (CVE-2022-22965), which allows attackers to remotely execute arbitrary code. Please confirm and update as soon as possible!

Description:
For details, please refer to the following links.

https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement

https://spring.io/blog/2022/04/01/spring-framework-rce-mitigation-alternative

https://www.microsoft.com/security/blog/2022/04/04/springshell-rce-vulnerability-guidance-for-protecting-against-and-detecting-cve-2022-22965/

Network System Division
Computer and Communication Center