Impact of CVE 2022 22965 Spring4Shell vulnerability
说明
Impact of CVE 2022 22965 Spring4Shell vulnerability
A critical vulnerability was recently discovered related to a Spring MVC or Spring WebFlux application running on JDK 9+ More information about this vulnerability can be found here: https://nvd.nist.gov/vuln/detail/CVE-2022-22965
原因
This is an industry-wide vulnerability and is not specific to Syslog-ng Store Box.
解决办法
The Spring Framework is not used on Syslog-ng Store Box in any form, Therefore Syslog-ng Store Box is not affected by CVE 2022 22965