CVE-2022-22947 PoC — VMware Spring Cloud Gateway 代码注入漏洞

Source

https://github.com/dbgee/CVE-2022-22947

Associated Vulnerability

Title:VMware Spring Cloud Gateway 代码注入漏洞 (CVE-2022-22947)
Description:In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.

Description

Spring Cloud Gateway Actuator API 远程命令执行 CVE-2022-22947

Readme

# Spring Cloud Gateway RCE Env   CVE-2022-22947

> CVE-2022-22947 was identified in the Spring Cloud Gateway Server jar.
> After the application is compiled you should be able to view the existing routes by visiting: http://127.0.0.1:9000/actuator/gateway/routes

### Compile

```
$ mvn package -DskipTests
```

### Run

```
$ java -jar target/spring-gateway-rce-0.0.1.jar
```

The application should run be running on port 9000.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!