Web Vulnerabilities
Spring4Shell
Also: CVE-2022-22965
A 2022 flaw in the Spring Framework where request data binding could be abused for remote code execution in certain deployments.
In more detail
It is a data-binding bug: under specific conditions, request parameters could reach properties of internal objects that were never meant to be set from outside. It is often discussed beside Log4Shell as a second case of a ubiquitous library becoming the hole.