CVE-2016-1000027 Spring Framework RCE

[bdfkockmeyer]

Scanning our Docker image file, we have found a vulnerability in the spring framework which is rated as critical.

More information about this CVE:

• https://nvd.nist.gov/vuln/detail/CVE-2016-1000027
• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2016-1000027

Could you please investigate and address this issue?

[superkartoffel]

Since Hawkbit does not use any HttpInvoker, I assume that it is not affected by this CVE.