Sploitus

Exploit for Expression Language Injection in Vmware Spring Cloud Gateway

CVE-2022-22947

githubexploit · 2022-03-07

Exploit Code

README21 lines
## https://sploitus.com/exploit?id=1CDFD17D-AEE2-5E87-8F7E-ECAB130E9D6B
# CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE
## Overview of CVE-2022-22947
```
Risk Level: High
Publicity: Public
CNVD Number: CNNVD-2022-16402
Affected Versions:
  Spring Cloud Gateway 3.1.0
  Spring Cloud Gateway >= 3.0.0
```

### Reverse Shell
1. First, enable listening of the network interface:
   ```
   nc -lvvp 5000
   ```

2. Enter the shell command to proceed to the reverse shell operation.

3. Enter the reverse shell command to gain control of the system.