[EDGCSOFT-35] Spring4Shell Morning Glory (CVE-2022-22965) - FOLIO Issue Tracker

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: P2
Resolution: Done
Affects Version/s: None
Fix Version/s: None
Labels:
None

Template:

Standard Bug Write-Up Format
Sprint:
Firebird - Sprint 141
Story Points:
0
Development Team:
Firebird
Release:
Morning Glory (R2 2022)
RCA Group:
TBD

Description

Upgrade spring-boot-starter-parent from 2.6.2 to >= 2.6.6 on master branch; or explain why edge-caiasoft is not affected by Spring4Shell. See ~~FOLIO-3466~~

TestRail: Results

Attachments

Issue Links

blocks

FOLIO-3466 Spring4Shell: spring-beans RCE Vulnerability (CVE-2022-22965)

Closed

Activity

People

Assignee:: Unassigned

Reporter:: Julian Ladisch

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 01/Apr/22 11:45 AM

Updated:: 30/May/22 9:14 PM

Resolved:: 13/May/22 2:02 PM

Spring4Shell Morning Glory (CVE-2022-22965)