{"id":2591,"date":"2022-04-03T09:00:00","date_gmt":"2022-04-03T07:00:00","guid":{"rendered":"https:\/\/codepix.website\/tt3p\/kennisbank\/geen-categorie\/ernstige-kwetsbaarheid-in-spring-core-framework\/"},"modified":"2022-04-03T09:00:00","modified_gmt":"2022-04-03T07:00:00","slug":"ernstige-kwetsbaarheid-in-spring-core-framework","status":"publish","type":"kennisbank","link":"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/","title":{"rendered":"Ernstige kwetsbaarheid in Spring Core Framework"},"content":{"rendered":"<div class=\"blog__text content\">\n<p style=\"text-align: justify\"><strong>Er is een ernstige kwetsbaarheid (&#8220;Spring4Shell&#8221;) ontdekt in Spring Core Framework, een veelgebruikte set van Java libraries. Een kwaadwillende kan de kwetsbaarheid misbruiken om een willekeurige code uit te voeren in de scope van de ontwikkelde applicatie. Hiermee kan toegang tot gevoelige informatie binnen die applicatie worden verkregen.\u00a0<\/strong><\/p>\n<p>Het Nationaal Cyber Security Centrum heeft een High\/High beveiligingsadvies over de kwetsbaarheid gepubliceerd, <a href=\"https:\/\/advisories.ncsc.nl\/advisory?id=NCSC%2D2022%2D0221\">NCSC-2022-0221<\/a> en houdt de komende maand een actueel overzicht bij van mitigerende maatregelen, detectiemethoden en applicaties waarvan bekend is geworden of ze wel of niet kwetsbaar zijn voor de Spring4Shell-kwetsbaarheid. U vindt dit overzicht op de <a href=\"https:\/\/github.com\/NCSC-NL\/spring4shell\">GitHub<\/a> van het NCSC.<\/p>\n<p style=\"text-align: justify\">Online melden diverse bronnen dat er actieve pogingen tot misbruik van de kwetsbaarheid zijn waargenomen. De ontwikkelaar heeft updates voor Spring Core Framework beschikbaar gesteld. Wij adviseren gebruikers om te updaten naar versies <a href=\"https:\/\/spring.io\/blog\/2022\/03\/31\/spring-framework-rce-early-announcement\">5.3.18 of 5.2.20<\/a>. <br \/>De impact van mogelijk misbruik kan groot zijn, ga daarom na of uw organisatie gebruik maakt van een kwetsbare versie van Spring Core Framework.<\/p>\n<p style=\"text-align: justify\">Het NCSC monitort de situatie nauwgezet en staat in contact met (inter)nationale partners en doelgroepen om nadere informatie over dit incident snel te duiden en te delen.<\/p>\n<\/p><\/div>\n","protected":false},"featured_media":2592,"template":"","kennisbank-tag":[38],"kennisbank-categorie":[27],"class_list":["post-2591","kennisbank","type-kennisbank","status-publish","has-post-thumbnail","hentry","kennisbank-tag-cybersecurity","kennisbank-categorie-blogs"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Ernstige kwetsbaarheid in Spring Core Framework - The Trusted Third Party<\/title>\n<meta name=\"description\" content=\"Er is een ernstige kwetsbaarheid (&quot;Spring4Shell&quot;) ontdekt in Spring Core Framework, een veelgebruikte set van Java libraries. Een kwaadwillende kan de\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"nl_NL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ernstige kwetsbaarheid in Spring Core Framework - The Trusted Third Party\" \/>\n<meta property=\"og:description\" content=\"Er is een ernstige kwetsbaarheid (&quot;Spring4Shell&quot;) ontdekt in Spring Core Framework, een veelgebruikte set van Java libraries. Een kwaadwillende kan de\" \/>\n<meta property=\"og:url\" content=\"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/\" \/>\n<meta property=\"og:site_name\" content=\"The Trusted Third Party\" \/>\n<meta property=\"og:image\" content=\"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2025\/04\/Bereid-uw-werknemers-voor.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1800\" \/>\n\t<meta property=\"og:image:height\" content=\"1013\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschatte leestijd\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minuut\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"WebPage\",\"ItemPage\"],\"@id\":\"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/\",\"url\":\"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/\",\"name\":\"Ernstige kwetsbaarheid in Spring Core Framework - The Trusted Third Party\",\"isPartOf\":{\"@id\":\"https:\/\/codepix.website\/tt3p\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2022\/04\/spring.png\",\"datePublished\":\"2022-04-03T07:00:00+00:00\",\"description\":\"Er is een ernstige kwetsbaarheid (\\\"Spring4Shell\\\") ontdekt in Spring Core Framework, een veelgebruikte set van Java libraries. Een kwaadwillende kan de\",\"breadcrumb\":{\"@id\":\"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/#breadcrumb\"},\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/#primaryimage\",\"url\":\"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2022\/04\/spring.png\",\"contentUrl\":\"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2022\/04\/spring.png\",\"width\":1200,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/codepix.website\/tt3p\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Kennisbank\",\"item\":\"https:\/\/codepix.website\/tt3p\/kennisbank\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Ernstige kwetsbaarheid in Spring Core Framework\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/codepix.website\/tt3p\/#website\",\"url\":\"https:\/\/codepix.website\/tt3p\/\",\"name\":\"The Trusted Third Party\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/codepix.website\/tt3p\/#organization\"},\"alternateName\":\"TT3P\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/codepix.website\/tt3p\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nl-NL\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/codepix.website\/tt3p\/#organization\",\"name\":\"The Third Trusted Party\",\"alternateName\":\"TT3P\",\"url\":\"https:\/\/codepix.website\/tt3p\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\/\/codepix.website\/tt3p\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2024\/08\/Logo.webp\",\"contentUrl\":\"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2024\/08\/Logo.webp\",\"width\":500,\"height\":180,\"caption\":\"The Third Trusted Party\"},\"image\":{\"@id\":\"https:\/\/codepix.website\/tt3p\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ernstige kwetsbaarheid in Spring Core Framework - The Trusted Third Party","description":"Er is een ernstige kwetsbaarheid (\"Spring4Shell\") ontdekt in Spring Core Framework, een veelgebruikte set van Java libraries. Een kwaadwillende kan de","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"nl_NL","og_type":"article","og_title":"Ernstige kwetsbaarheid in Spring Core Framework - The Trusted Third Party","og_description":"Er is een ernstige kwetsbaarheid (\"Spring4Shell\") ontdekt in Spring Core Framework, een veelgebruikte set van Java libraries. Een kwaadwillende kan de","og_url":"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/","og_site_name":"The Trusted Third Party","og_image":[{"width":1800,"height":1013,"url":"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2025\/04\/Bereid-uw-werknemers-voor.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Geschatte leestijd":"1 minuut"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["WebPage","ItemPage"],"@id":"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/","url":"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/","name":"Ernstige kwetsbaarheid in Spring Core Framework - The Trusted Third Party","isPartOf":{"@id":"https:\/\/codepix.website\/tt3p\/#website"},"primaryImageOfPage":{"@id":"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/#primaryimage"},"image":{"@id":"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/#primaryimage"},"thumbnailUrl":"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2022\/04\/spring.png","datePublished":"2022-04-03T07:00:00+00:00","description":"Er is een ernstige kwetsbaarheid (\"Spring4Shell\") ontdekt in Spring Core Framework, een veelgebruikte set van Java libraries. Een kwaadwillende kan de","breadcrumb":{"@id":"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/#breadcrumb"},"inLanguage":"nl-NL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/"]}]},{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/#primaryimage","url":"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2022\/04\/spring.png","contentUrl":"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2022\/04\/spring.png","width":1200,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/codepix.website\/tt3p\/kennisbank\/blogs\/ernstige-kwetsbaarheid-in-spring-core-framework\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/codepix.website\/tt3p\/"},{"@type":"ListItem","position":2,"name":"Kennisbank","item":"https:\/\/codepix.website\/tt3p\/kennisbank\/"},{"@type":"ListItem","position":3,"name":"Ernstige kwetsbaarheid in Spring Core Framework"}]},{"@type":"WebSite","@id":"https:\/\/codepix.website\/tt3p\/#website","url":"https:\/\/codepix.website\/tt3p\/","name":"The Trusted Third Party","description":"","publisher":{"@id":"https:\/\/codepix.website\/tt3p\/#organization"},"alternateName":"TT3P","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/codepix.website\/tt3p\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nl-NL"},{"@type":"Organization","@id":"https:\/\/codepix.website\/tt3p\/#organization","name":"The Third Trusted Party","alternateName":"TT3P","url":"https:\/\/codepix.website\/tt3p\/","logo":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/codepix.website\/tt3p\/#\/schema\/logo\/image\/","url":"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2024\/08\/Logo.webp","contentUrl":"https:\/\/codepix.website\/tt3p\/wp-content\/uploads\/2024\/08\/Logo.webp","width":500,"height":180,"caption":"The Third Trusted Party"},"image":{"@id":"https:\/\/codepix.website\/tt3p\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/codepix.website\/tt3p\/wp-json\/wp\/v2\/kennisbank\/2591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/codepix.website\/tt3p\/wp-json\/wp\/v2\/kennisbank"}],"about":[{"href":"https:\/\/codepix.website\/tt3p\/wp-json\/wp\/v2\/types\/kennisbank"}],"version-history":[{"count":0,"href":"https:\/\/codepix.website\/tt3p\/wp-json\/wp\/v2\/kennisbank\/2591\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/codepix.website\/tt3p\/wp-json\/wp\/v2\/media\/2592"}],"wp:attachment":[{"href":"https:\/\/codepix.website\/tt3p\/wp-json\/wp\/v2\/media?parent=2591"}],"wp:term":[{"taxonomy":"kennisbank-tag","embeddable":true,"href":"https:\/\/codepix.website\/tt3p\/wp-json\/wp\/v2\/kennisbank-tag?post=2591"},{"taxonomy":"kennisbank-categorie","embeddable":true,"href":"https:\/\/codepix.website\/tt3p\/wp-json\/wp\/v2\/kennisbank-categorie?post=2591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}