Lucene search
+L

7 matches found

Kitploit
Kitploit
•added 2026/10/09 5:34 a.m.•15 views

CVE-2022-22947-POC

Spring-Cloud-Gateway-CVE-2022-22947 Aviso de seguridad de la vulnerabilidad de ejecución remota de código en Spring Cloud Gateway. Esta vulnerabilidad permite ataques de inyección de código en aplicaciones que usan Spring Cloud Gateway cuando el endpoint de Gateway Actuator está habilitado y...

10CVSS8AI score0.98253EPSS
SaveExploits54References1
Kitploit
Kitploit
•added 2026/10/08 11:44 a.m.•18 views

cve-2022-22947-spring-cloud-gateway

Introducción a la vulnerabilidad Spring Cloud Gateway es un nuevo proyecto de Spring Cloud. Este proyecto es una puerta de enlace desarrollada sobre tecnologías como Spring 5.0, Spring Boot 2.0 y Project Reactor, y tiene como objetivo proporcionar una forma sencilla y eficaz de gestión unificada ...

10CVSS8AI score0.98253EPSS
SaveExploits54
GithubExploit
GithubExploit
•added 2022/06/08 9:52 a.m.•425 views

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Spring-Cloud-Gateway-CVE-2022-22947 Security Notice regardi...

10CVSS8.5AI score0.98253EPSS
SaveExploits54
VulnCheck KEV
VulnCheck KEV
•added 2022/04/27 12:00 a.m.•17 views

VulnCheck KEV: CVE-2022-22947

Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured...

10CVSS7.8AI score0.98253EPSS
SaveIn wildExploits54References344
BDU FSTEC
BDU FSTEC
•added 2022/03/28 12:00 a.m.•18 views

The vulnerability of the Gateway Actuator component in the Spring Cloud Gateway API gateway library allows a attacker to execute arbitrary code.

The vulnerability of the Gateway Actuator component in the Spring Cloud Gateway API gateway library is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...

10CVSS8.5AI score0.98253EPSS
SaveExploits54References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/03 12:00 a.m.•3 views

CVE-2022-22947: Improper Control of Generation of Code

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the...

10CVSS7.9AI score0.98253EPSS
SaveExploits54References3
Mend
Mend
•added 2022/03/03 12:00 a.m.•2 views

CVE-2022-22947

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the...

10CVSS0.98253EPSS
SaveExploits54References8
Rows per page
Query Builder