.. / CVE-2022-22947

Exploit for Spring Cloud Gateway Code Injection (CVE-2022-22947)

Description:

Applications using Spring Cloud Gateway prior to 3.1.1+ and 3.0.7+ are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.

Nuclei Template

View the template here CVE-2022-22947.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-22947.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2022-22947
https://tanzu.vmware.com/security/cve-2022-22947
https://github.com/wdahlenburg/spring-gateway-demo
https://spring.io/blog/2022/03/01/spring-cloud-gateway-cve-reports-published
https://wya.pl/2022/02/26/cve-2022-22947-spel-casting-and-evil-beans/