Security Announcement on CVE-2022-1471

We will update this announcement with new details as they emerge from our analysis. Please check back periodically.

Last update: 27 June 2023, 10:30 PM CET

This CVE is ignored upstream: https://github.com/spring-projects/spring-boot/issues/33457

The implementation in Spring Boot 2.7. does not use the SnakeYaml unsafe contructor, so it is not possible to trigger the exploit without explicit usage of the vulnerable code.

Navigation

Navigate through the help pages using the table of contents on the left. If it is not displayed when the window width is small, you can temporarily show it via the hamburger menu on the right.

Use the arrows on the toolbar to navigate to the next/previous page.

You can show hidden areas. Use the toolbar to show all hidden areas at once:

Clicking the product icon in the header returns you to the beginning of the current area. Use the toolbar to access the initial page:

Full-text Search

The search does not feature case sensitivity. A search term is also found as part of a string. Multiple search terms in the exact order as entered will be found if they are enclosed in quotation marks (").

Boolean
Operators

You can use the following Boolean operators:

AND

Finds the pages that contain all search terms.

Spaces, '+', and '&' function the same.

Finds the pages that contain at least one of the search terms.

The pipe character (|) functions the same.

You can combine search terms and Boolean operators using parentheses.

Example: Paul AND (Peter OR Meyer)

The current portal area is used for the search. You can use Google to search through all portal areas.

Example: follow-ups site:help.optimal-systems.com

Please contact the OPTIMAL SYSTEMS technical editorial staff for questions and comments regarding the documention at dokumentation(at)optimal-systems.de.