is geode impacted by last RCE vulnerability in the Spring Framework

48 Views Asked by At

is geode impacted by last RCE vulnerability in the Spring Framework ? vulnerability details : https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement

geode 1.14.2 has below dependencies - should spring framework used by geode upgraded to 5.3.18 ? [1]: https://i.stack.imgur.com/U6Hi6.png

1

There are 1 best solutions below

1
On

Please have a look at GEODE-10201, it contains the information you're looking for.