Spring Framework suffers from an arbitrary code execution vulnerability. Versions affected include 3.0.0 to 3.0.2, 2.5.0 to 2.5.6SEC01 (community releases) and 2.5.0 to 2.5.7 (subscription customers).
464c70a443ef9692530dbda478e34f5a3956fde33c6de1caa81b62e0cc7ac632