sonatype-2022-1764 Security Details

CVE ID

sonatype-2022-1764

CWE

N/A

CVE Description

Spring-Beans- Remote Code Execution (RCE) [CVE-2022-22965]

Published

Mar 30, 2022

CVSS Score & Severity

9.8Critical

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

org/springframework/beans/CachedIntrospectionResults.<init>(Ljava/lang/Class;)V

JVMVulnerable params: 0

Affected Ecosystems

affected

Source

Sonatype

References

spring.ioPROJECT

web.archive.orgTHIRD_PARTY

blog.sonatype.comTHIRD_PARTY

praetorian.comTHIRD_PARTY

rapid7.comTHIRD_PARTY