Spring Boot ClassLoader Reflection RCE via Deserialization (CVE-2021-42569) Analysis & POC
Security Advisory
CVE-2021-42569
Critical
Spring
Affected:
- spring-boot < 2.4.12
- spring-boot >= 2.5.0 < 2.5.12
- spring-boot >= 2.6.0 < 2.6.4
Fixed in:
- 2.4.12
- 2.5.12
- 2.6.4
Referenced CVEs:
CVE-2026-112081 · 6.3
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.