CVE-2022-22947 PoC — VMware Spring Cloud Gateway 代码注入漏洞

Source

https://github.com/kmahyyg/CVE-2022-22947

Associated Vulnerability

Title:VMware Spring Cloud Gateway 代码注入漏洞 (CVE-2022-22947)
Description:In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.

Readme

# Copied from

Original: 
- https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell
- https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947

File Snapshot


 [4.0K]  /data/pocs/1f4a21198282abb85a796d711959cec3a85b02d5
├── [4.0K]  lucksec-version
│   ├── [1.6K]  README.md
│   ├── [3.3K]  Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947）.md
│   └── [4.5K]  spring_cloud_RCE.py
├── [ 154]  README.md
└── [4.0K]  whwlsfb-version
    ├── [5.8K]  GMemShell.java
    └── [ 160]  README.md

2 directories, 6 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!