Spring4Shell Exploit Attempt - CVE-2022-22965

Spring is a popular open source Java development framework often deployed on Apache Tomcat. Changes to the Class object in JDK 9 created a vulnerability in the Spring Framework where class objects are exposed and can be manipulated to enable remote command execution (RCE).

The vulnerability, referred to as Spring4Shell, enables an attacker to leverage class object properties to access and manipulate other valuable objects on the system. An attacker can exploit this vulnerability by sending a specially designed HTTP request that creates a malicious file on an Apache Tomcat server and then send a request to run that file. For example, an attacker can bind new property values to an Apache Tomcat logging object that directs the access log to write a web shell into the webroot.