Spring4Shell is a a zero-dat vulnerability in the Spring Core Java network. It's tracked as CVE-2022-22965. Impacted users must upgrade to the latest versions of Spring immediately.
Spring4Shell
Key takeaways
When exploited, Spring4Shell could facilitate Remote Code Injection (RCE)- The current known exploit only occurs on Tomcat servers, but its limitation to this environment isn't yet conclusive.
- Impacted users must upgrade to the latest versions of Spring immediately.
Reviewed by
No items found.
Author
Edward Kost
Reviewed by
See UpGuard In Action
Book a free, personalized onboarding call with one of our cybersecurity experts.
More from our blog
Learn more about the latest issues in cybersecurity.
UpGuard’s Future: The Strategic Edge Your Security Team Needs
UpGuard’s Future: The Strategic Edge Your Security Team Needs
Start unifying your security and improve your posture in real-time with UpGuard’s CRPM platform. Lead your team into the next era of cybersecurity today.
.jpeg){kind=avatar}
Revashni Moodley
September 26, 2025
Compounding Intelligence: UpGuard’s GRID and 1+1>2 Approach
Compounding Intelligence: UpGuard’s GRID and 1+1>2 Approach
Tired of fighting fires? Learn how UpGuard’s CRPM platform, powered by the GRID and 1+1>2 effect, helps you control your security posture proactively.
Revashni Moodley
September 16, 2025
Sign up for our newsletter
UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
Free instant security score
How secure is your organization?
