3 ms·It was a Struts vulnerability, not Spring. Sounds like they were using both.by ihattendorf 9y agoIt was a Struts vulnerability, not Spring. Sounds like they were using both.