Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-22947 PoC — VMware Spring Cloud Gateway 代码注入漏洞

Source
https://github.com/aesm1p/CVE-2022-22947-POC-Reproduce
Associated Vulnerability
Title:VMware Spring Cloud Gateway 代码注入漏洞 (CVE-2022-22947)
Description:In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
Description
CVE-2022-22947 reproduce
Readme
# CVE-2022-22947-POC
CVE-2022-22947 reproduce
File Snapshot

 [4.0K]  /data/pocs/16a0d43aa0b1f761ec65dd4bc4dd035ee2761923
├── [4.0K]  demo
│   ├── [ 10K]  mvnw
│   ├── [6.6K]  mvnw.cmd
│   ├── [1.9K]  pom.xml
│   └── [4.0K]  src
│       ├── [4.0K]  main
│       │   ├── [4.0K]  java
│       │   │   └── [4.0K]  com
│       │   │       └── [4.0K]  example
│       │   │           └── [4.0K]  demo
│       │   │               ├── [ 305]  DemoApplication.java
│       │   │               └── [ 365]  GatewayApplication.java
│       │   └── [4.0K]  resources
│       │       └── [ 757]  application.yml
│       └── [4.0K]  test
│           └── [4.0K]  java
│               └── [4.0K]  com
│                   └── [4.0K]  example
│                       └── [4.0K]  demo
│                           └── [ 206]  DemoApplicationTests.java
└── [  46]  README.md

13 directories, 8 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →