What happens with CVE-2022-22965?

kris · April 5, 2022, 4:57pm

Hello @ira-gordin-sap - welcome to the community!

We have details regarding the “Spring4Shell” issue here on GitHub:

github.com/opensearch-project/OpenSearch

[BUG] Spring RCEs (CVE-2022-22965)

opened 07:22AM - 01 Apr 22 UTC

closed 06:51PM - 01 Apr 22 UTC

ict-one-nl

bug security

**Describe the bug** On the opensearch website, newest version: 1.3.1 Docker h…ub: 1.3.1 !! Github 1.3.0 Can't find the release notes, is this release because of the Spring RCE bugs? The ambiguous communicatie combined with the impact of the vulnerabilities makes me unsure if I should upgrade asap or if the release is about something else. **Expected behavior** Versions are consistent on website, github, docker, etc and there are changenotes and a news item on the website on the focus of the release.

Thank you

Topic		Replies	Views
Spring4Shell vulnerability Security discuss , security-issue	3	716	April 5, 2022
I Geeting some vulnerability issue in opensearchproject/opensearch:2.8.0 docker Image OpenSearch releases , cve , security-issue	3	513	June 29, 2023
Text4Shell CVE (CVE-2022-42889) detected in OpenSearch Security cve , security-issue	1	1098	November 1, 2022
Log4j2 vulnerability in OpenSearch Security discuss , cve , security-issue	72	10053	January 30, 2022
I Geeting some vulnerability issue in opensearchproject/opensearch:2.8.0 docker Image. Image, OpenSearch releases , cve , security-issue	0	336	June 19, 2023

What happens with CVE-2022-22965?

Related topics