cve-2022-22947-spring-cloud-gateway

Vulnerability Overview Spring Cloud Gateway is a new project under Spring Cloud, built on Spring 5.0, Spring Boot 2.0, and Project Reactor. It aims to provide a simple and effective unified API routing management method for microservice architectures. Recently, Spring Cloud Gateway was reported t...

CVE-2022-22947-POC

Spring-Cloud-Gateway-CVE-2022-22947 Security advisory for a remote code execution vulnerability in Spring Cloud Gateway. When Spring Cloud Gateway is enabled and the Gateway Actuator endpoint is exposed, applications using Spring Cloud Gateway are susceptible to code injection attacks. An attacke...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Spring-Cloud-Gateway-CVE-2022-22947 Security Notice regardi...

VulnCheck KEV: CVE-2022-22947

Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured...

The vulnerability of the Gateway Actuator component in the Spring Cloud Gateway API gateway library allows a attacker to execute arbitrary code.

The vulnerability of the Gateway Actuator component in the Spring Cloud Gateway API gateway library is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...

CVE-2022-22947: Improper Control of Generation of Code

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the...