Patch now: RCE Spring4shell hits Java Spring framework - The Register

You didn't have any plans for the weekend anyway, did you?

Another Java Remote Code Execution vulnerability has reared its head, this time in the popular Spring Framework and, goodness, it's a nasty one. Dubbed "Springshell" or "Spring4Shell", the vulnerabi… [+3614 chars]

full article...