EDB-51577

PoC

Spring Cloud 3.2.2 - Remote Command Execution (RCE)

view exploit source exploit_dbtype webappsauthor GatoGamer1155published 2023-07-11catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-22963UScritical9.8OT criticalKEV
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a r…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan