This is Vulnerable Web Application developed for course by Cyber Security and Privacy Foundation (www.cysecurity.org) for Java programmers
The full course on Hacking and Securing Web Java Programs is available in
https://www.udemy.com/hacking-securing-java-web-programming/
Get the VulnerableSpring Project from here: https://github.com/breakthesec/VulnerableSpring