Detect Dangerous Spring Service Exporters With CodeQL
How to make sure that CVE-2016-1000027 does not affect your application
Published in
4 min readMar 25, 2021
In this blog post, I’ll talk about detecting unsafe Spring Exporters with a CodeQL query. First, I’ll describe the issue that received CVE-2016-1000027. Next, I’ll show what a vulnerable code looks like and how the issue can be mitigated in an application. Then, I’ll describe how the CodeQL query works. In addition, I’ll show a couple of vulnerabilities that have been found by the query.
