yang991178
CVE-2022-22965: Spring Framework RCE via Data Binding on JDK 9+
A new windows defender definition breaks fluent-reader as it's vulnerable to remote code execution. ClamAV also picks this up.
https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html https://tanzu.vmware.com/security/cve-2022-22965
As a result on second load, the app isn't functional due to having files quarantined:
Suggested solutions: Updating the spring framework, https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement
This looks strange, as no component of the spring framework is contained in this app. It seems that the quarantined files are just data files for the indexedDB database used for storing subscriptions and articles.
defender is still quarantining this to this day, it seems to do so every once a while breaking the app until the user manually restores what it considers a "threat".