#Spring4shell

🧵 #Spring4Shell Vulnerability Explained Learn how a Java 9 architectural change led to a critical RCE vulnerability affecting millions of Spring applications. Includes technical deep dive, impact analysis, and actionable mitigation strategies.

🧵 New Blog: Spring4Shell Vulnerability Explained Learn how a Java 9 architectural change led to a critical RCE vulnerability affecting millions of Spring applications. Must-read for #Java devs & #AppSec teams #Spring4Shell #InfoSec

Join @SGgrc & @leolaporte for a breakdown of Microsoft’s new #Autopatch system, the #Spring4Shell vulnerability, and the 0-Day in NGINX - “the Internet’s most used webserver platform!”  Hear the latest #cybersecurity news and subscribe on @pocketcasts

We've published an analysis of the #Spring4Shell RCE to help provide better "facts" about what we know so far. There are 2 vulnerabilities and people are confusing them. Note: This post is Markdown on GitHub if you'd like to add anything (link in thread).

Checkmarx is closely monitoring #Spring4Shell and all other Spring vulnerabilities (CVE-2022-22963, CVE-2022-22950). Checkmarx SCA customers can scan their code for those vulnerabilities and get the latest remediation solutions. #springshell

FullHunt developed spring4shell, an open-source tool for discovering spring4shell and Spring Cloud RCE at scale. The new developed payloads within spring4shell-scan bypasses several WAF vendors. Blog Post: #spring4shell #infosec #springshell

#Spring4Shell (CVE-2022-22965) Remote Code Execution (RCE) was discovered in Spring Core running JDK version 9 (or later). We’ve created a lab to show you how to exploit the #vulnerability. Watch, then get more exploits here: #demo #java .

🚨 A fixed version for CVE-2022-22965 (#Spring4Shell) has been issued. At this time, we recommend upgrading to spring-beans version 5.2.20, 5.3.18, or higher and have updated our advisory published on Mar. 30:

Do not understand people overhyping some vulns but underhyping #spring4shell. Just run a #CodeQL query on 9340 spring projects hosted on GitHub. 7203 are vulnerable (if depoyed as WARs on Tomcat). Thats 3 out of 4 projects!

⛔️ Early this morning we started seeing buzz about a new remote code execution flaw that affects #SpringCore. Our Field CTO @llkkaT provides all the info on #Spring4Shell: 💭 What it is 💭 Everything you need to know 💭 Where to go from here ⛓️

⚠️ While #Spring4Shell doesn't appear to have the same impact as #Log4Shell, it should still be evaluated and prioritized by every organization using the Spring Framework. This post explores how the #ZeroDay #RCE vulnerability works and how to mitigate.

#Spring4Shell: The zero-day RCE in the #SpringFramework explained by @BrianVerm I must admit that this made my day: "[...] it looks like this vulnerability is only effective if you use JDK 9 and up"

Spring has sprung — new #cyberthreats that is. 🐚 The new #Spring4Shell vulnerability could allow intruders to wreak havoc in your environment. Get details on this threat, including how to know if you're at risk, and if your are, how to patch it:

First YARA rules to detect the PoC code and webshells dropped by the public POC exploiting the #Spring4Shell vulnerability Signature set of THOR Lite should be updated in a minute Thx to @xyantix @testanull Next step: log file based detection

🚨 Please see NCSC alert regarding RCE vulnerability (CVE-2022-22965) that exists in Java Spring framework #Spring4Shell

Stable PoC for #Spring4Shell. Don't massive scan targets without knowledge about this, it can cause crash application in somehow 🙄👀 #bugbountytips #begbountytips

There’s a significant number of prerequisites for #Spring4Shell We don’t know how many applications are vulnerable but it’s far less serious than initially expected

#Java #SpringShell is indeed legit and successful exploitation results in a JSP webshell (default is tomcatwar.jsp but this is trivial to change). Check your web logs for POST requests and look for new jsp filemods. #Spring4Shell

New emergent threat response: “#Spring4Shell: Zero-Day Vulnerability in Spring Framework (CVE-2022-22965).” Read our blog overview of what you need to know ⤵️ Note: we will continue to update this blog as more information becomes available.

Well, it's showtime again. The #Spring4Shell exploit works, tested with Spring 5.2.3. We'll keep an eye on @sans_isc web site (getting late here).