Lucene search

D30073F4-9BB7-54D9-A5F6-DCCA5A005D4D

HistoryApr 01, 2022 - 12:34 a.m.

Exploit for Expression Language Injection in Vmware Spring Cloud Function

2022-04-0100:34:29

762

expression language injection

vmware

spring cloud function

bash script

manifest files

security exploit

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.975

Percentile

100.0%

JSON

springhound

Created after the release of CVE-2022-22965 a…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

rapid7blog

Update on Spring4Shell’s Impact on Rapid7 Solutions and Systems

2022-04-01 14:42:42

Metasploit Weekly Wrap-Up

2022-04-01 18:34:29

What’s New in InsightVM and Nexpose: Q2 2022 in Review

2022-07-28 14:00:00

githubexploit

Exploit for Expression Language Injection in Vmware Spring Cloud Function

2022-03-31 20:19:51

Exploit for Code Injection in Vmware Spring Framework

2022-03-31 16:14:36

Exploit for CVE-2016-4977

2022-06-19 13:16:55

ibm

Security Bulletin: CMIS is affected since it uses Spring Framework, but not vulnerable to [CVE-2022-22965] and [CVE-2022-22963]

2022-10-18 15:36:16

Security Bulletin: IBM QRadar SIEM is affected by a remote code execution in Spring Framework (CVE-2022-22963, CVE-2022-22965, CVE-2022-22950)

2022-06-24 17:34:09

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data is affected by a remote code execution in Spring Framework (CVE-2022-22965)

2022-04-27 14:54:28

paloalto

Informational: Impact of Spring Vulnerabilities CVE-2022-22963 and CVE-2022-22965

2022-03-31 02:30:00

kitploit

Spring4Shell-Scan - A Fully Automated, Reliable, And Accurate Scanner For Finding Spring4Shell And Spring Cloud RCE Vulnerabilities

2022-04-24 21:30:00

CVE-2022-22963 - PoC Spring Java Framework 0-day Remote Code Execution Vulnerability

2022-03-31 11:30:00

Spring4Shell-POC - Dockerized Spring4Shell (CVE-2022-22965) PoC Application And Exploit

2022-05-10 12:30:00

qualysblog

Spring Framework Zero-Day Remote Code Execution (Spring4Shell) Vulnerability

2022-03-31 09:00:00

fortinet

CVE-2022-22965 and CVE-2022-22963 vulnerabilities

2022-04-01 00:00:00

K11510688 : Spring Framework (Spring4Shell) and Spring Cloud vulnerabilities CVE-2022-22965, CVE-2022-22950, and CVE-2022-22963

2022-03-31 00:00:00

cert

Spring Framework insecurely handles PropertyDescriptor objects with data binding

2022-03-31 00:00:00

cisa

Spring Releases Security Updates Addressing "Spring4Shell" and Spring Cloud Function Vulnerabilities

2022-04-01 00:00:00

securelist

Spring4Shell (CVE-2022-22965): details and mitigations

2022-04-04 15:30:36

avleonov

Spring4Shell, Spring Cloud Function RCE and Spring Cloud Gateway Code Injection

2022-04-03 00:15:45

redhat

(RHSA-2022:1292) Low: Release of OpenShift Serverless 1.21.1

2022-04-11 08:22:04

(RHSA-2022:1291) Low: Release of OpenShift Serverless Client kn 1.21.1

2022-04-11 07:34:16

(RHSA-2022:1626) Low: Red Hat AMQ Broker 7.8.6 release and security update

2022-04-27 09:45:11

osv

CVE-2022-22963

2022-04-01 23:15:13

Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression

2022-04-03 00:00:59

CVE-2022-22965

2022-04-01 23:15:13

packetstorm

Spring Cloud 3.2.2 Remote Command Execution

2023-07-12 00:00:00

Spring Cloud Function SpEL Injection

2022-03-31 00:00:00

Spring4Shell Spring Framework Class Property Remote Code Execution

2022-05-10 00:00:00

zdt

Spring Cloud Function SpEL Injection Exploit

2022-03-31 00:00:00

Spring Cloud 3.2.2 - Remote Command Execution Exploit

2023-07-11 00:00:00

Spring4Shell Spring Framework Class Property Remote Code Execution Exploit

2022-05-10 00:00:00

wallarmlab

Update on 0-day vulnerabilities in Spring (Spring4Shell and CVE-2022-22963)

2022-03-31 01:49:02

prion

Remote code execution

2022-04-01 23:15:00

saint

Spring Cloud Function Remote Code Execution

2022-04-05 00:00:00

Spring Cloud Function Remote Code Execution

2022-04-05 00:00:00

github

Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression

2022-04-03 00:00:59

Remote Code Execution in Spring Framework

2022-03-31 18:30:50

cisco

Vulnerability in Spring Cloud Function Framework Affecting Cisco Products: March 2022

2022-04-01 23:45:00

Vulnerability in Spring Framework Affecting Cisco Products: March 2022

2022-04-01 23:45:00

spring

CVE report published for Spring Cloud Function

2022-03-30 00:53:00

cve

CVE-2022-22963

2022-04-01 23:15:13

CVE-2022-22965

2022-04-01 23:15:13

openvas

VMware Spring Cloud Function < 3.1.7, 3.2.x < 3.2.3 RCE Vulnerability - Active Check

2022-05-06 00:00:00

VMware Spring Boot RCE Vulnerability (Spring4Shell, SpringShell)

2022-04-06 00:00:00

VMware Spring Framework RCE Vulnerability (Spring4Shell, SpringShell) - Active Check

2023-12-13 00:00:00

checkpoint_advisories

Spring Cloud Function Remote Code Execution (CVE-2022-22963)

2022-03-31 00:00:00

Spring Core Remote Code Execution (CVE-2022-22965)

2022-03-31 00:00:00

nessus

VMware Spring Cloud Function < 3.1.7 / 3.2.x < 3.2.3 SPEL Expression Injection (local check)

2022-04-14 00:00:00

Spring Cloud Function SPEL Expression Injection (direct check)

2022-03-31 00:00:00

RHEL 8 : Release of OpenShift Serverless Client kn 1.21.1 (Low) (RHSA-2022:1291)

2024-04-28 00:00:00

wizblog

Addressing the Spring4Shell and CVE-2022-22963 RCE vulnerabilities in cloud environments

2022-04-01 05:00:39

nuclei

Spring Cloud - Remote Code Execution

2022-03-27 14:47:28

Spring - Remote Code Execution

2022-04-01 11:43:45

cisa_kev

VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

2022-08-25 00:00:00

Spring Framework JDK 9+ Remote Code Execution Vulnerability

2022-04-04 00:00:00

exploitdb

Spring Cloud 3.2.2 - Remote Command Execution (RCE)

2023-07-11 00:00:00

metasploit

Spring Cloud Function SpEL Injection

2022-03-30 22:38:41

Spring Framework Class property RCE (Spring4Shell)

2022-04-07 13:22:18

redhatcve

CVE-2022-22963

2022-03-31 18:32:29

CVE-2022-22965

2022-03-31 18:32:57

akamaiblog

Spring Cloud Function SpEL Injection (CVE-2022-22963) Exploited in the Wild

2022-03-31 19:30:00

attackerkb

CVE-2022-22963

2022-04-01 00:00:00

veracode

Remote Code Execution

2022-03-31 01:51:42

cvelist

CVE-2022-22963

2022-04-01 00:00:00

CVE-2022-22965

2022-04-01 22:17:30

nvd

CVE-2022-22963

2022-04-01 23:15:13

CVE-2022-22965

2022-04-01 23:15:13

ubuntucve

CVE-2022-22965

2022-04-01 00:00:00

talosblog

Threat Advisory: Spring4Shell

2022-04-04 10:26:10

msrc

Microsoft’s Response to CVE-2022-22965 Spring Framework

2022-04-05 07:00:00

Microsoft’s Response to CVE-2022-22965 Spring Framework

2022-04-05 07:00:00

trendmicroblog

CVE-2022-22965: Analyzing the Exploitation of Spring4Shell Vulnerability in Weaponizing and Executing the Mirai Botnet Malware

2022-04-08 00:00:00

Analyzing Attempts to Exploit the Spring4Shell Vulnerability CVE-2022-22965 to Deploy Cryptocurrency Miners

2022-04-20 00:00:00

Spring4Shell Vulnerability CVE-2022-22965 Exploited to Deploy Cryptocurrency Miners

2022-04-20 00:00:00

thn

Security Patch Releases for Critical Zero-Day Bug in Java Spring Framework

2022-03-31 15:35:00

vaadin

Spring Core Remote Code Execution via Data Binding on JDK 9+

2022-04-01 00:00:00

vmware

VMware Response to Spring Framework Remote Code Execution Vulnerability (CVE-2022-22965)

2022-04-02 00:00:00

VMware Response to Spring Framework Remote Code Execution Vulnerability (CVE-2022-22965)

2022-04-02 00:00:00

VMware Response to Spring Framework Remote Code Execution Vulnerability (CVE-2022-22965)

2022-04-02 00:00:00

malwarebytes

4 over-hyped security vulnerabilities of 2022

2022-12-19 01:00:00

mmpc

SpringShell RCE vulnerability: Guidance for protecting against and detecting CVE-2022-22965

2022-04-05 01:11:24

impervablog

Imperva Protects from New Spring Framework Zero-Day Vulnerabilities

2022-03-31 15:20:03

mssecure

SpringShell RCE vulnerability: Guidance for protecting against and detecting CVE-2022-22965

2022-04-05 01:11:24

cloudfoundry

CVE-2022-22965: UAA affected by Spring Framework RCE via Data Binding on JDK 9+ | Cloud Foundry

2022-04-05 00:00:00

hivepro

RCE Spring Framework Zero-Day vulnerability “Spring4Shell”

2022-04-12 02:21:11

debiancve

CVE-2022-22965

2022-04-01 23:15:13

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.975

Percentile

100.0%

JSON

Exploit for Expression Language Injection in Vmware Spring Cloud Function

springhound

Related