Spring Data REST PATCH Request Remote Code Execution
Posted by deepcore on March 21, 2018 – 1:55 am
Spring Data REST versions prior to 2.6.9 (Ingalls SR9) and 3.0.1 (Kay SR1) suffer from a PATCH request remote code execution vulnerability.
Post a reply
You must be logged in to post a comment.