New Zero-Day RCE Vulnerability in Spring Java Framework; Could “Spring4Shell” Be the Next Log4Shell?
A new zero-day remote code execution (RCE) vulnerability in the Spring Java Framework is drawing comparisons to Log4Shell. It can be exploited by simply sending a crafted HTTP request to a target system.
