继 Spring Cloud 之后,3.29 日 ,网上爆出Spring 的又一重量级漏洞:Spring Core RCE
目前exp 已上传 exp.py
流传的打码poc
尴尬的局面
- jdk 版本在9及以上的
- 使用了Spring Framework或衍生框架
目前,Spring 官方暂未发布补丁,建议降低jdk 版本作为临时方案
forked from craig/SpringCore0day
-
Notifications
You must be signed in to change notification settings - Fork 0
SpringCore0day from https://share.vx-underground.org/
Notifications
You must be signed in to change notification settings
IIIIIuhrey/SpringCore0day
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Latest commit | ||||
Repository files navigation
Releases
No releases published
Packages 0
No packages published
Languages
- Python 100.0%