Spring4Shell CVE-2022-22965 RCE Exploitation Attempt

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•6

Detects HTTP POST requests containing patterns associated with the Spring4Shell vulnerability (CVE-2022-22965). The rule specifically looks for payloads manipulating 'class.module.classLoader' or 'class.classLoader.resources.dirContext' to achieve Remote Code Execution (RCE) on vulnerable Spring Framework applications.