Back Icon Back

cloud destinations



Sept 2022


  • Spring4Shell
  • Spring Framework Vulnerability
  • RCE Vulnerability
  • Security Patch


12 Min Read

Spring4Shell: Everything You Need to Know About the Newest Spring Framework Vulnerability

The Spring Framework is a lightweight Open source application framework that gives infrastructure for developing java application.Java applications are vulnerable to spring4shell. Using the vulnerability they compromised a huge number of servers

How Severe is Spring4Shell ?

An attacker could exploit Spring4Shell by sending a crafted request to a vulnerable server. However, exploitation of Spring4Shell requires certain prerequisites, whereas the first Log4Shell vulnerability affected all versions of Log4j 2 using the default configuration. According to Spring, the subsequent requirements were included within the vulnerability report, however the post cautions that there could also be other ways during which this will be exploited so this might not be an entire list of requirements at this time:

  • Java Development Kit (JDK) 9 or greater
  • Apache Tomcat because the Servlet container
  • Packaged as a WAR
  • spring-webmvc or spring-webflux dependency


There are two vulnerabilities in the spring framework that allow malicious actors to achieve remote code execution (RCE).

  1. RCE in “Spring Core”:
  2. CVE-2022-22965 which is a critical severity RCE vulnerability in Spring core.The vulnerability in Spring Core—referred as Spring4Shell Spring4shell can be exploited when a malicious actor sends a specially crafted query to a web server running the Spring Core framework. Users running JDK version 9 and newer are vulnerable to an Remote code Execution (RCE) attack.
  3. RCE in “Spring Cloud Function”:
  4. CVE-2022-22963: RCE in Spring Cloud Function.It is a routing functionality of Spring Cloud Function that permits code injection through Spring Expression Language (SpEL).

Applying Mitigations:

To detect exploitation attempts, make sure that Advanced Exploit Prevention and Network Attack Blocker features are enabled. Some techniques used during exploitation are often seen in other exploits that we detect, which is why the decision names can differ.To mitigate risk, upgrade to the newest versions to deal with the Spring4Shell vulnerabilities:

  • Spring Core RCE
  • Information Exposure in Spring Cloud Function
  • Denial of Service in Spring Expressions

CD Bytes!

One of the biggest challenges today in cybersecurity is to quickly detect the threats in the network and control the damage. Cloud Destinations prevent, detect, and respond to attacks with built-in unified experiences and end-to-end EDR capabilities and resolve threats faster with automation and expertise. Please reach out to for any business related queries.

Back Icon Back Blogs

Related Posts

cloud destinations partners

United States

2603 Camino Ramon, Bishop Ranch 3, Suite 200, San Ramon, CA 94583, USA

cloud destinations partners


9850 King George Blvd, 2nd-5th Floor, Surrey, British Columbia, V3T 4Y3, Canada

cloud destinations partners


833A/ 3, Level 28, The Gardens South Tower, Mid Valley City, Lingkaran Syed Putra, 59200, Kuala Lumpur, Malaysia

cloud destinations partners


Block A2, First Floor, Span Ventures SEZ, Rathinam Tech Zone, Pollachi Main Road, Eachanari, Coimbatore – 641021

cloud destinations partners


WorkEZ Urban Square, Kandanchavadi, OMR, Kottivakkam, Rajiv Gandhi Salai, Chennai – 600041

Thank you for visiting our website! We use cookies to enhance your experience. These cookies help us remember your preferences, display relevant information, and ensure smooth functionality. By clicking “Accept,” you consent to our use of cookies. For more details, please see our Privacy Policy.