Done
Details
Assignee
UnassignedUnassignedReporter
Julian LadischJulian LadischLabels
Priority
P2Development Team
SpitfireAffects versions
TestRail: Cases
Open TestRail: CasesTestRail: Runs
Open TestRail: Runs
Details
Details
Assignee
Unassigned
UnassignedReporter
Julian Ladisch
Julian Ladisch
Labels
Priority
P2Development Team
Spitfire
Affects versions
TestRail: Cases
Open TestRail: Cases
TestRail: Runs
Open TestRail: Runs
Created April 5, 2022 at 5:32 PM
Updated April 12, 2022 at 9:25 AM
Resolved April 12, 2022 at 9:25 AM
Update Spring from 5.3.16 to >= 5.3.18.
This fixes
CVE-2022-22950 (medium-severe) - Denial of Service (DoS) in Spring Expression (SpEL)
CVE-2022-22965 (critical) - "Spring4Shell" or Remote Code Execution (RCE) in Spring Core = FOLIO-3466