source code diff:
https://github.com/spring-projects/spring-framework/commit/7f7fb58dd0dae86d22268a4b59ac7c72a6c22529
poc:
Just wait, I do not have that :)
btw, the release of https://github.com/shakeman8/Spring-Core-RCE might be torjan, because it protected by VMProtect, Do Not Download.
you can read this:
https://github.com/shakeman8/CVE-2022-24086-RCE/issues/2
https://s.threatbook.cn/report/file/45ef7d9efba711af2196fe0d14097293fb0922b76addee0f7e4d19fa03b3844d/?env=win7_sp1_enx64_office2013 The author upload this exe to threatbook before he release.
2022.3.30 0:07