# Spring4Shell Vulnerability

**URL:** <https://forum.mattermost.com/t/spring4shell-vulnerability/13136>\
**Category:** Troubleshooting\
**Created:** [March 31, 2022, 4:37pm UTC](https://forum.mattermost.com/t/spring4shell-vulnerability/13136 "2022-03-31T16:37:08Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ShaunS](https://avatars.discourse-cdn.com/v4/letter/s/f9ae1b/32.png) [@ShaunS](https://forum.mattermost.com/u/ShaunS)\
**Post date:** [March 31, 2022, 4:37pm UTC](https://forum.mattermost.com/t/spring4shell-vulnerability/13136/1 "2022-03-31T16:37:08Z")

</div>

Can you confirm if MM is impacted from this issue.

> **[Home](https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement/)**
>
> Level up your Java code and explore what Spring can do for you.

---

<div class="post-metadata">

**Author:** ![amy.blais](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/amy.blais/32/7481_2.png) [@amy.blais](https://forum.mattermost.com/u/amy.blais)\
**Post date:** [March 31, 2022, 7:14pm UTC](https://forum.mattermost.com/t/spring4shell-vulnerability/13136/2 "2022-03-31T19:14:51Z")

</div>

Would you be open to contacting our security team via [Report a Security Vulnerability - Mattermost](https://mattermost.com/security-vulnerability-report/)?

---

<div class="post-metadata">

**Author:** ![ShaunS](https://avatars.discourse-cdn.com/v4/letter/s/f9ae1b/32.png) [@ShaunS](https://forum.mattermost.com/u/ShaunS)\
**Post date:** [April 4, 2022, 12:51pm UTC](https://forum.mattermost.com/t/spring4shell-vulnerability/13136/3 "2022-04-04T12:51:51Z")

</div>

I could I guess, but I am not saying there is an issue. Seems like that page is assuming I know there is a problem.

Assume your development team can confirm if they are impacted by this and the community would like to know.

---

<div class="post-metadata">

**Author:** ![amy.blais](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/amy.blais/32/7481_2.png) [@amy.blais](https://forum.mattermost.com/u/amy.blais)\
**Post date:** [April 4, 2022, 5:30pm UTC](https://forum.mattermost.com/t/spring4shell-vulnerability/13136/4 "2022-04-04T17:30:24Z")

</div>

A response from our Security team:

A critical vulnerability targeting the Spring Java framework was recently disclosed. Mattermost would like to share a quick update that our services and products are NOT affected by the Spring4Shell security vulnerability also identified as CVE-2022-22965.

---

<div class="post-metadata">

**Author:** ![ShaunS](https://avatars.discourse-cdn.com/v4/letter/s/f9ae1b/32.png) [@ShaunS](https://forum.mattermost.com/u/ShaunS)\
**Post date:** [April 4, 2022, 5:48pm UTC](https://forum.mattermost.com/t/spring4shell-vulnerability/13136/5 "2022-04-04T17:48:19Z")

</div>

Perfect, thanks for the reply