6 ms·
The whole basis of this claim was a commit in a merged PR yeah?
by EdwardDiego 5y ago
The whole basis of this claim was a commit in a merged PR yeah?
- richbell 5y agoNo. There was a credible report, but one of the blogs (Cyber Kendra) linked to a commit that mentioned RCE off hand and said "it looks like they're cleaning up". https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement https://spring.io/blog/2022/03/31/spring-framework-rce-early...