Spring4Shell
Author
Discussion

Radec

Original Poster:

5,990 posts

77 months

Monday 4th April 2022
quotequote all
What is it?
I'm not in the IT world but have had some queries on it from clients.

Is it this year's Log4J?

eeLee

1,009 posts

110 months

Monday 4th April 2022
quotequote all
No. It's a specific config that exposes you to RCE if you have Spring java stuff on Tomcat.

It's last Friday's head-scratching moment.