[org.springframework:spring] Improper Control of Generation of Code (‘Code Injection’) in Spring Framework

SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

References

• https://nvd.nist.gov/vuln/detail/CVE-2010-1622
• http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html
• http://geronimo.apache.org/21x-security-report.html
• http://geronimo.apache.org/22x-security-report.html
• http://www.exploit-db.com/exploits/13918
• http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
• https://seclists.org/fulldisclosure/2010/Jun/456
• https://github.com/advisories/GHSA-vpr3-f594-mg5g