Skip to content

About the RCE 0day Vulnerability #1394

Closed
Closed
About the RCE 0day Vulnerability#1394
Labels
Extension: Spring

Description

@chenhliang
chenhliang
opened on Mar 31, 2022

Component of restlet-framework-java [spring-beans 3.2.8.RELEASE]. The RCE 0day vulnerability may exist. Please check whether exists. If yes, how to rectify the fault. Thank you.

Activity

  1. Tembrel commented on Mar 31, 2022

    @Tembrel
    Tembrel
    on Mar 31, 2022
    Collaborator

    Restlet does not refer to Spring's SerializationUtils, which appears to be at the heart of the vulnerability.

  2. jlouvel
    added
    Extension: Spring
    on May 12, 2024
  3. thboileau-git
    closed this as completedon Oct 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Extension: Spring

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions