CVE-2022-22947

Spring Cloud Gateway Actuator API Inyección de expresión SpEL y ejecución de comandos CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 Uso: root@kitploit: -t http://vuldomain.com //IP individual -f urls.txt //Escaneo masivo desde archivo, multihilo, rápido -c...

Spring Cloud Gateway Server Webflux - Broken Access Control

Spring Cloud Gateway Server Webflux contains a vulnerability caused by unsecured and exposed actuator endpoints allowing modification of Spring Environment properties, letting attackers modify configuration, exploit requires unsecured actuator endpoints exposure. id: CVE-2025-41243 info: name:...

Versa Concerto Actuator Endpoint - Authentication Bypass

An authentication bypass vulnerability affected the Spring Boot Actuator endpoints in Versa Concerto due to improper handling of the X-Real-Ip header.Attackers could access restricted endpoints by omitting this header.The issue allowed unauthorized access to sensitive functionality, highlighting...

Spring Boot Actuator Logview Directory Traversal

spring-boot-actuator-logview before version 0.2.13 contains a directory traversal vulnerability in libraries that adds a simple logfile viewer as a spring boot actuator endpoint maven package "eu.hinsch:spring-boot-actuator-logview". id: CVE-2021-21234 info: name: Spring Boot Actuator Logview...

cve-2022-22947

Inyección de código SpEL en la API Actuator de Spring Cloud Gateway CVE-2022-22947 Compilación root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22947.git $ cd cve-2022-22947 $ docker build . -t cve-2022-22947 $ docker run -p 9000:9000 --name cve-2022-22947 cve-2022-22947 PoC envía...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework...

CVE-2022-22947_EXP

1. Spring Cloud Gateway Remote Code Execution Vulnerability Hazard Level: High POC/EXP: Public CNVD ID: CNNVD-2022-16402 CVE ID: CVE-2022-22947 2. Affected Versions: VMWare Spring Cloud GateWay 3.1.0 VMWare Spring Cloud GateWay =3.0.0, =3.0.6 VMWare Spring Cloud GateWay 3.0.0 3. Vulnerability...

CVE-2022-22947

CVE-2022-22947 Spring Cloud Gateway es un API gateway de Spring. En sus versiones 3.1.0 y 3.0.6 incluidas y anteriores existía una vulnerabilidad de inyección de expresiones SpEL. Cuando un atacante puede acceder a la Actuator API, puede explotar esta vulnerabilidad para ejecutar comandos...

cve-2022-22947

cve-2022-22947 Spring Cloud Gateway is an API gateway in Spring. Versions 3.1.0 and 3.0.6 inclusive and earlier contain a SpEL expression injection vulnerability. When an attacker can access the Actuator API, they can exploit this vulnerability to execute arbitrary commands. Usage: root@kitploit:...

CVE-2022-22947-POC

Spring-Cloud-Gateway-CVE-2022-22947 Aviso de seguridad de la vulnerabilidad de ejecución remota de código en Spring Cloud Gateway. Esta vulnerabilidad permite ataques de inyección de código en aplicaciones que usan Spring Cloud Gateway cuando el endpoint de Gateway Actuator está habilitado y...

CVE-2022-22947-pb-ai

Aplicación de verificación de vulnerabilidad CVE-2022-22947 Spring Cloud Gateway Esta es una aplicación Spring Cloud Gateway diseñada específicamente para demostrar y verificar la vulnerabilidad CVE-2022-22947. La aplicación utiliza una versión vulnerable de Spring Cloud Gateway y puede ejecutar...

CVE-2022-22947

CVE-2022-22947 root@kitploit: script for exploit Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 root@kitploit: https://github.com/march0s1as/CVE-2022-22947 cd CVE-2022-22947 go build spring.go ./spring -h...

cve-2025-22235-demo

CVE-2025-22235: Demostración de la vulnerabilidad de bypass de autenticación en Spring Boot EndpointRequest.to Descripción de la vulnerabilidad CVE-2025-22235 es una vulnerabilidad de seguridad en Spring Boot que involucra al método EndpointRequest.to, el cual puede generar matchers incorrectos a...

CVE-2021-21234

CVE-2021-21234 Directory traversal vulnerability in the spring-boot-actuator-logview library https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...

CVE-2022-22947

Spring Cloud Gateway 3.0.7 & 3.1.1 Code Injection RCE CVE: CVE-2022-22947 CVSS: 10.0 Vmware - https://tanzu.vmware.com/security/cve-2022-22947 Applications using Spring Cloud Gateway are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A...

cve-2022-22947-spring-cloud-gateway

Vulnerability Overview Spring Cloud Gateway is a new project under Spring Cloud, built on Spring 5.0, Spring Boot 2.0, and Project Reactor. It aims to provide a simple and effective unified API routing management method for microservice architectures. Recently, Spring Cloud Gateway was reported t...

spring-cloud-gateway-rce

Ejecución de comandos por inyección de expresión SpEL en la API Actuator de Spring Cloud Gateway CVE-2022-22947 1. Instalación root@kitploit: pip3 install -r requirements.txt 2. Uso root@kitploit: $ python3 spring-cloud-gateway-rce.py -h / \ /\ /\ /\ | \ / \ | \ | \ | \ | \ / \ | || | | | / / \ ...

CVE-2022-22947

Entorno RCE de Spring Cloud Gateway CVE-2022-22947 CVE-2022-22947 fue identificado en el jar del servidor Spring Cloud Gateway. Después de compilar la aplicación, debería poder ver las rutas existentes visitando: http://127.0.0.1:9000/actuator/gateway/routes Compilar root@kitploit: $ mvn package...

SpEL

SpEL Batch detection tool for Spring Cloud Gateway Actuator API SpEL expression injection command execution CVE-2022-22947 Usage Write the URLs to be tested line by line in a file. Use parameter -TF to specify the file, and -t for concurrency count. Execution Result Yutu Security is committed to...

CVE-2022-22947

CVE-2022-22947 A code injection attack on spring cloud gateway Summary of the CVE In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+, applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make ...