CVE-2022-22947

Descrição da Vulnerabilidade Spring Cloud Gateway é um novo projeto do Spring Cloud, com o objetivo de substituir o Netflix Zuul. Ele é desenvolvido com base em Spring 5.0+, Spring Boot 2.0+ e WebFlux baseado no framework de comunicação reativa de alto desempenho Netty, modelo assíncrono não...

CVE-2025-41243-Vulnerability-Lab

CVE-2025-41243: Spring Cloud Gateway RCE Lab Descrição da Vulnerabilidade Spring Cloud Gateway possui uma vulnerabilidade de injeção de expressão SpEL; quando o endpoint Actuator está ativado, um atacante pode realizar execução remota de código RCE. Método de Inicialização docker-compose up -d...

CVE-2022-22947

CVE-2022-22947 CVE-2022-22947 Spring-Cloud-Gateway No primeiro trimestre de 2022, foi descoberta uma vulnerabilidade interessante e crítica pontuação base de 10.0 de injeção de código no Spring Cloud Gateway, aproveitando a API Actuator para realizar injeção SpEL, potencialmente levando ao...

CVE-2022-22947-pb-ai

CVE-2022-22947 Spring Cloud Gateway भेद्यता सत्यापन एप्लिकेशन यह CVE-2022-22947 भेद्यता को प्रदर्शित करने और सत्यापित करने के लिए एक समर्पित Spring Cloud Gateway एप्लिकेशन है। यह एप्लिकेशन Spring Cloud Gateway के एक असुरक्षित संस्करण का उपयोग करता है, जिसके माध्यम से Actuator एंडपॉइंट के जरिए...

CVE-2022-22947_EXP

1. Spring Cloud Gateway दूरस्थ कोड निष्पादन भेद्यता खतरे का स्तर: उच्च जोखिम POC/EXP स्थिति: सार्वजनिक CNVD क्रमांक: CNNVD-2022-16402 CVE क्रमांक: CVE-2022-22947 2. प्रभावित सीमा: VMWare Spring Cloud GateWay 3.1.0 VMWare Spring Cloud GateWay =3.0.0，=3.0.6 VMWare Spring Cloud GateWay 3.0.0 3...

CVE-2021-21234

CVE-2021-21234 CVE-2021-21234 Spring Boot डायरेक्टरी ट्रैवर्सल spring-boot-actuator-logview एक लाइब्रेरी में स्प्रिंग बूट एक्चुएटर एंडपॉइंट के रूप में एक सरल लॉग फ़ाइल व्यूअर जोड़ता है। यह मावेन पैकेज “eu.hinsch:spring-boot-actuator-logview” है। spring-boot-actuator-logview के 0.2.13 संस्करण से...

Spring-Cloud-Gateway-CVE-2022-22947

Spring-Cloud-Gateway-CVE-2022-22947 Spring Cloud Gateway दूरस्थ कोड निष्पादन भेद्यता के लिए सुरक्षा बुलेटिन। यह भेद्यता तब होती है जब Spring Cloud Gateway Gateway Actuator एंडपॉइंट को सक्षम और उजागर करता है, Spring Cloud Gateway का उपयोग करने वाले अनुप्रयोग कोड इंजेक्शन हमले के प्रति संवेदनशील हो...

CVE-2022-22947-POC

Spring-Cloud-Gateway-CVE-2022-22947 Spring Cloud Gateway रिमोट कोड निष्पादन भेद्यता की सुरक्षा सलाह। यह भेद्यता तब उत्पन्न होती है जब Spring Cloud Gateway Gateway Actuator एंडपॉइंट को सक्षम और एक्सपोज़ करता है, तो Spring Cloud Gateway का उपयोग करने वाले एप्लिकेशन कोड इंजेक्शन हमलों के प्रति...

CVE-2022-22947

Spring Cloud Gateway 3.0.7 и 3.1.1 Внедрение кода RCE CVE: CVE-2022-22947 CVSS: 10.0 Vmware - https://tanzu.vmware.com/security/cve-2022-22947 Приложения, использующие Spring Cloud Gateway, уязвимы к атаке внедрения кода, когда конечная точка Gateway Actuator включена, доступна и не защищена...

CVE-2022-22947

CVE-2022-22947 هجوم حقن كود على spring cloud gateway ملخص CVE في إصدارات spring cloud gateway الأقدم من 3.1.1+ و 3.0.7+، تكون التطبيقات عرضة لهجوم حقن كود عند تمكين نقطة نهاية Gateway Actuator وجعلها مكشوفة وغير آمنة. يمكن لمهاجم عن بعد إرسال طلب تم إنشاؤه بشكل ضار قد يسمح بتنفيذ تعليمات برمجية...

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE مقدمة عن CVE-2022-22947 root@kitploit: مستوى الخطر: عالي حالة POC/EXP: معلن رقم CNVD: CNNVD-2022-16402 نطاق التأثير: Spring Cloud GateWay 3.1.0 Spring Cloud GateWay =3.0.0، =3.0.6 Spring Cloud GateWay 3.0.0 وصف الثغرة توجد ثغرة تنفيذ تعليمات برمجية عن...

CVE-2022-22947

CVE-2022-22947 CVE-2022-22947 परिचय Spring Cloud Gateway रिमोट कोड एक्ज़ीक्यूशन भेद्यता CVE-2022-22947 Spring Cloud Gateway एप्लिकेशन के Actuator एंडपॉइंट पर होती है, जो सक्षम, सार्वजनिक और असुरक्षित होने पर कोड इंजेक्शन के हमलों के लिए संवेदनशील होता है। हमलावर इस भेद्यता के माध्यम से...

CVE-2026-11458

A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This issue affects some unknown processing of the file /base-boot/actuator of the component Boot Actuator Endpoint. Executing a manipulation can lead to information disclosure. The attack can be...

CVE-2026-11458

A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This issue affects some unknown processing of the file /base-boot/actuator of the component Boot Actuator Endpoint. Executing a manipulation can lead to information disclosure. The attack can be...

CVE-2026-11458 erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure

A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This issue affects some unknown processing of the file /base-boot/actuator of the component Boot Actuator Endpoint. Executing a manipulation can lead to information disclosure. The attack can be...

CVE-2026-11458 erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure

A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This issue affects some unknown processing of the file /base-boot/actuator of the component Boot Actuator Endpoint. Executing a manipulation can lead to information disclosure. The attack can be...

EUVD-2026-34988

A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This issue affects some unknown processing of the file /base-boot/actuator of the component Boot Actuator Endpoint. Executing a manipulation can lead to information disclosure. The attack can be...

JeeWMS 访问控制错误漏洞

JeeWMS is a JAVA-based warehouse management system developed by JeeWMS Corporation in China. There is an access control vulnerability in JeeWMS, which stems from issues with the handling of files in the /base-boot/actuator directory within the Boot Actuator Endpoint component. This vulnerability...

CVE-2025-62188 Apache DolphinScheduler: Users can access sensitive information through the actuator endpoint.

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Apache DolphinScheduler. This vulnerability may allow unauthorized actors to access sensitive information, including database credentials. This issue affects Apache DolphinScheduler versions 3.1.. Users are...

CVE-2025-62188 Apache DolphinScheduler: Users can access sensitive information through the actuator endpoint.

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Apache DolphinScheduler. This vulnerability may allow unauthorized actors to access sensitive information, including database credentials. This issue affects Apache DolphinScheduler versions 3.1.. Users are...