CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行Exp Use：python3 CVE-2022-22947.py -u "http://127.0.0.1:8080" -c "whoami" Result： Добавление вредоносного маршрута SpEL-выражения успешно! Обновление маршрутов успешно! Получение результата атаки успешно: ==============================================...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

CVE-2022-22947 Spring Cloud Gateway Vulnerability Demonstratio...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Spring Cloud Gateway Remote Code Execution Vulnerability...

Open Redirect

getgrav/grav is vulnerable to open redirect. The vulnerability exists because the function redirect in Common/Grav.php does not validate the internal route parameter route and redirect to another location, allowing attackers to provide a malicious route to a location or file...