The problem of form binding in spring-framework is actually the bypass of CVE-2010-1622 vulnerability on high version jdk. In JDK 9 and above, the new module attribute can be exploited to bypass the repair logic of the previous CVE-2010-1622 vulnerability.
Are we going to do anything to solve this problem? thank you!
Affects Version/s: 2.7.17