Red Hat Security Advisory

RHSA-2022:1360

Red Hat Fuse 7.10.2 release and security update

Released 2022-04-13 · Red Hat rating Low · View on Red Hat →

Fixed in

TI-2022-07142 CVE-2022-22965 · GHSA-36p3-wjmg-h94x

CRITICAL 100KEV

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99638 Published 2022-04-01 Partial fix · 5.2.20.RELEASE, 5.3.18 +2 CWE-94