Please be advised that SA-2022-003 has been published. This is a first in a series of "Spring4Shell" advisories.
Security Advisory Link: Security Advisory: SA-2022-003 – "Spring4Shell" (CVE-2022-22965) | Extreme Portal (force.com)
Summary:
A Spring MVC or Spring WebFlux application may be vulnerable to remote code execution (RCE) via data binding. You can find a list of all products and whether or not they are effected by this advisory in the article linked above.
