Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-22947 PoC — VMware Spring Cloud Gateway 代码注入漏洞

Source
https://github.com/Wrong-pixel/CVE-2022-22947-exp
Associated Vulnerability
Title:VMware Spring Cloud Gateway 代码注入漏洞 (CVE-2022-22947)
Description:In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
Readme
# CVE-2022-22947-exp

## 复现了一下CVE-2022-22947漏洞，写了漏洞利用的exp
## 后面根据大佬的文章写了内存马注入的exp，仅供参考
File Snapshot

 [4.0K]  /data/pocs/52270068103602b2aceacb8ea909c3796e76f962
├── [6.9K]  CVE-2022-22947-memshell.py
├── [1.9K]  CVE-2022-22947.py-rce.py
├── [ 161]  README.md
└── [1.9K]  SpringRequestMappingMemshell.java

0 directories, 4 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →