Jump to content

Spring Framework

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by 136.232.13.166 (talk) at 06:30, 13 October 2023 (Version history). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.
Spring Framework
Developer(s)VMware
Initial release1 October 2002; 22 years ago (2002-10-01)
Stable release
6.2.1[1] Edit this on Wikidata / 12 December 2024; 5 months ago (12 December 2024)
Repository
Written inJava
PlatformJava EE
TypeApplication framework
LicenseApache License 2.0
Websitespring.io/projects/spring-framework Edit this on Wikidata

The Spring Framework is an application framework and inversion of control container for the Java platform.[2] The framework's core features can be used by any Java application, but there are extensions for building web applications on top of the Java EE (Enterprise Edition) platform. The framework does not impose any specific programming model.[citation needed]. The framework has become popular in the Java community as an addition to the Enterprise JavaBeans (EJB) model.[3] The Spring Framework is free and open source software.[4]: 121–122 [5]

Relationship with Jakarta Enterprise Beans (EJB)

The container can be turned into a partially compliant EJB (Enterprise JavaBeans) 3.0 container by means of the Pitchfork project.[citation needed] Some[who?] criticize the Spring Framework for not complying with standards.[6][failed verification] However, SpringSource doesn't see EJB 3 compliance as a major goal, and claims that the Spring Framework and the container allow for more powerful programming models.[7][failed verification]

Spring4Shell vulnerability

A remote code execution vulnerability affecting certain versions of Spring Framework was published in April 2022 under CVE-2022-22965. It was given the name Spring4Shell in reference to the recent Log4Shell vulnerability, both having similar proofs-of-concept in which attackers could gain shell access on vulnerable machines.[8]

See also

Citations

  1. ^ "v6.2.1". 12 December 2024. Retrieved 12 December 2024.
  2. ^ Deinum et al. 2014, p. 47, §2 Spring Core Tasks.
  3. ^ Deinum et al. 2014, pp. 694–698, §16-2 Integrating Two Systems Using JMS.
  4. ^ Johnson & Hoeller 2004.
  5. ^ Deinum & Cosmina 2021, p. 1, §1 Setting up a Local Development Environment.
  6. ^ Spring VS EJB3
  7. ^ "Pitchfork FAQ". Retrieved 2006-06-06.
  8. ^ "Spring4Shell: critical vulnerability in Spring - Kaspersky official blog".

References