MarcinGadz/spring-rce-poc

PoC

Testing CVE-2022-22968

view exploit source poc_in_githubauthor MarcinGadzpublished 2022-05-12catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-22968US	medium5.3	5.67% (93rd)	Exploit	2022-04-14
In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a fiel…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.