Sploitus

Exploit for Code Injection in Vmware Spring Cloud Gateway

CVE-2022-22947

githubexploit · 2022-08-03

Exploit Code

README20 lines
## https://sploitus.com/exploit?id=571017BF-5A13-5AE0-991E-5676C236A65F
# CVE-2022-22947

# Introduction to CVE-2022-22947

The Spring Cloud Gateway remote code execution vulnerability (CVE-2022-22947) occurs in the Actuator endpoints of the Spring Cloud Gateway application. This vulnerability is vulnerable to code injection attacks when enabled, publicly accessible, and in insecure conditions. Attackers can use this vulnerability to maliciously create requests that allow arbitrary remote executions on remote hosts. # Affected versions
Spring Cloud Gateway 3.1.x < 3.1.1
Spring Cloud Gateway < 3.0.7

# Script description
The main functions of this script include vulnerability scanning (including single and batch scans).

# Usage guide
## 1. Single target scanning
The command for scanning a single target is as follows:
```
python CVE-2022-22947.py -u url
```
Example:
![Uploading image.png…]()