SpringShell – Remote Code Execution via Spring Web
Tags
attack-pattern: Exploits - T1587.004 Exploits - T1588.005 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 427ed0d8-662b-4dc9-ad0b-88a68540f64b
Fingerprint 94221537c937d6c9
Analysis status DONE
Considered CTI value 0
Text language
Published March 31, 2022, 12:04 p.m.
Added to db Aug. 13, 2023, 1:28 a.m.
Last updated Dec. 20, 2024, 10:18 p.m.
Headline SpringShell – Remote Code Execution via Spring Web
Title SpringShell – Remote Code Execution via Spring Web
Detected Hints/Tags/Attributes 27/1/4
Source URLs
Redirection Url
Details Source https://checkmarx.com/blog/springshell-remote-code-execution-via-spring-web/
URL Provider
Details Provider Source level domain
Details checkmarx.com checkmarx.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 82 ✔ Checkmarx https://checkmarx.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 99 
cve-2022-22965
Details CVE 14 
cve-2010-1622
Details Domain 5 
class.module.classloader.resources.context.parent.pipeline.first.directory
Details File 1 
ohno.jsp