cve-2022-22947

cve-2022-22947 Spring Cloud Gateway Spring mein ek API gateway hai. Iske 3.1.0 aur 3.0.6 version shamil se pehle ek SpEL अभिव्यक्ति इंजेक्शन भेद्यता maujood thi, jab attacker Actuator API tak pahunch sakta hai, to woh is भेद्यता ka upyog karke koi bhi command execute kar sakta hai. उपयोग:...