Exploit for CVE-2022-22947-POC

kitploit · 2026-08-29

Description

CVE-2022-22947 POC: unfiltered echo command in route enables code injection and execution.

Affected Vmware Spring Cloud Gateway versions

Vmware Spring Cloud Gateway< 3.0.7, 3.1.0

All known vulnerabilities by product

Spring Cloud Gateway

CVSS 10.0 for CVE-2022-22947

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

98.3%higher than 99.9% of all CVEs

Updated 2026-08-31

CVE Information

Exploit Details

Modified:2026-08-29 14:49

Last Seen:2026-08-29 16:18

Reporter:KitPloit

Tags

CVE-2022-22947echo commandcode injectionregex filterbatch detectioncommand execution

Other exploits for CVE-2022-22947

2026-08-31 KitPloitKITPLOIT

spring_cloud_gateway_memshell

2026-08-31 KitPloitKITPLOIT

2026-08-31 KitPloitKITPLOIT

CVE-2022-22947-Rce_POC

2026-08-31 KitPloitKITPLOIT

CVE-2022-22947-goby

2026-08-31 KitPloitKITPLOIT

2026-08-31 KitPloitKITPLOIT

2026-08-31 KitPloitKITPLOIT

spring-cloud-gateway-cve-2022-22947-report

2026-08-31 KitPloitKITPLOIT

Exploit Code

MARKDOWN14 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-NANAAO-CVE-2022-22947-POC
# CVE-2022-22947-POC

Script di rilevamento di massa per CVE-2022-22947, l'output del comando non è stato regolarizzato, usatelo per ora, aggiornerò in seguito

Metti url.txt nella directory dello script

Esegui direttamente python script.py

Dimostrazione: ![image](https://assets.kitploit.com/production/public/readmes/29757/fd12d76fc91af92d898f1e13ed6efb5679d0dff5c0176750ddabb57c5c47e723.png)

Dopo il completamento del rilevamento verrà generato un file txt con i successi

Questo script inietta il codice, aggiorna la route, mostra il comando, cancella il comando iniettato. Non me ne vogliate, eventuali bug verranno risolti domani