Spring4Shell
Author
Discussion

Radec

Original Poster:

6,017 posts

78 months

Monday 4th April 2022
quotequote all
What is it?
I'm not in the IT world but have had some queries on it from clients.

Is it this year's Log4J?

eeLee

1,013 posts

111 months

Monday 4th April 2022
quotequote all
No. It's a specific config that exposes you to RCE if you have Spring java stuff on Tomcat.

It's last Friday's head-scratching moment.