继 Spring Cloud 之后，3.29 日 ，网上爆出Spring 的又一重量级漏洞：Spring Core RCE
目前exp 已上传 exp.py
- jdk 版本在9及以上的
- 使用了Spring Framework或衍生框架
目前，Spring 官方暂未发布补丁，建议降低jdk 版本作为临时方案
forked from mcdulltii/SpringShell_0-day
-
Notifications
You must be signed in to change notification settings - Fork 0
LuckyZmj/SpringShell_0-day
About
Spring Core RCE 0-day Vulnerability
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published
Languages
- Python 100.0%