spring4shell Archives - Developer Tech News https://www.developer-tech.com/news/tag/spring4shell/ Gaming, Apps, HTML5, Java, PHP, C#, .net, IOT Tue, 05 Apr 2022 11:55:03 +0000 en-GB hourly 1 https://www.developer-tech.com/wp-content/uploads/sites/3/2020/09/dev-icon-60x60.png spring4shell Archives - Developer Tech News https://www.developer-tech.com/news/tag/spring4shell/ 32 32 80% of Spring framework downloads are exploitable versions https://www.developer-tech.com/news/2022/apr/05/80-of-spring-downloads-are-exploitable-versions/ https://www.developer-tech.com/news/2022/apr/05/80-of-spring-downloads-are-exploitable-versions/#respond Tue, 05 Apr 2022 11:55:01 +0000 https://developer-tech.com/?p=42830 Data from Sonatype suggests that 80 percent of weekly Spring framework downloads are still exploitable versions. Spring is a mighty popular framework—often ranking in the top three most-used Java frameworks. That’s why the Java developer community was shaken when a vulnerability named Spring4Shell (CVE-2022-22965) was leaked by a security researcher ahead of an official CVE... Read more »

The post 80% of Spring framework downloads are exploitable versions appeared first on Developer Tech News.

]]>
https://www.developer-tech.com/news/2022/apr/05/80-of-spring-downloads-are-exploitable-versions/feed/ 0
Spring4Shell vulnerability could have ‘a larger impact’ than Log4j https://www.developer-tech.com/news/2022/mar/31/spring4shell-vulnerability-could-larger-impact-log4j/ https://www.developer-tech.com/news/2022/mar/31/spring4shell-vulnerability-could-larger-impact-log4j/#respond Thu, 31 Mar 2022 07:53:20 +0000 https://developer-tech.com/?p=42803 A newly-discovered zero-day vulnerability known as Spring4Shell could have “a larger impact” than Log4j. Log4j made waves in recent months as the vulnerability in the popular open-source logging library enabled attackers to break into systems, steal passwords and logins, extract data, and infect networks with malicious software. However, attention is now shifting to the Spring4Shell... Read more »

The post Spring4Shell vulnerability could have ‘a larger impact’ than Log4j appeared first on Developer Tech News.

]]>
https://www.developer-tech.com/news/2022/mar/31/spring4shell-vulnerability-could-larger-impact-log4j/feed/ 0