get shell or die trying
https://www.veracode.com/blog/secure-development/spring-view-manipulation-vulnerability
I wrote this article while working at the Veracode Research team.