The Cybersecurity and Infrastructure Security Agency (CISA) has published an advisory on the release of Spring updates that address the remote code execution (RCE) vulnerability CVE-2022-22965, also known as “Spring4Shell.” Cloud Function versions 3.1.7 and 3.2.3 and Spring Framework versions 5.3.18 and 5.2.20 are available on the Spring by VMWare blog. CISA encourages users and administrators to immediately apply the necessary updates found in the blog posts, as well as reviewing the relevant vulnerability reports. Read the full advisory at CISA.
H2OSecCon 2025- a virtual security event for the water sector - happening May 20th. Register Now!