Sploitus

Exploit for CVE-2022-22947

kitploit Β· 2026-08-27

Exploit Code

MARKDOWN22 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-MRKNOW001-CVE-2022-22947
# Spring Cloud Gateway Actuator API SpEL-ΠΈΠ½ΡŠΠ΅ΠΊΡ†ΠΈΡ ΠΈ Π²Ρ‹ΠΏΠΎΠ»Π½Π΅Π½ΠΈΠ΅ ΠΊΠΎΠΌΠ°Π½Π΄ (CVE-2022-22947)

Spring Cloud Gateway Actuator API SpEL Code Injection (CVE-2022-22947)

**ИспользованиС:**

root@kitploit:~
    
    
      -t http://vuldomain.com             //ΠΎΠ΄ΠΈΠ½ IP
    
      -f urls.txt                         //ΠΏΠ°ΠΊΠ΅Ρ‚Π½ΠΎΠ΅ сканированиС ΠΈΠ· Ρ„Π°ΠΉΠ»Π°, ΠΌΠ½ΠΎΠ³ΠΎΠΏΠΎΡ‚ΠΎΡ‡Π½Ρ‹ΠΉ, быстрый
    
      -c command                          //ΠΏΠΎΠ»ΡŒΠ·ΠΎΠ²Π°Ρ‚Π΅Π»ΡŒΡΠΊΠ°Ρ ΠΊΠΎΠΌΠ°Π½Π΄Π°, ΠΏΠΎ ΡƒΠΌΠΎΠ»Ρ‡Π°Π½ΠΈΡŽ whoami
    

![img](https://raw.githubusercontent.com/mrknow001/CVE-2022-22947/main/img/spring-t.png)

![img](https://raw.githubusercontent.com/mrknow001/CVE-2022-22947/main/img/spring-c.png)

![img](https://raw.githubusercontent.com/mrknow001/CVE-2022-22947/main/img/spring-f.png)