683 matches found
Vulnerability fixed in Spring Cloud Function
A vulnerability has been fixed in Spring Cloud Function. A malicious party could potentially exploit the vulnerability to execute arbitrary code under application privileges. Spring Cloud Function is a complementary library for Spring Cloud, but is made available separately from the Spring...
Spring Cloud Function SpEL Injection
Spring Cloud Function versions prior to 3.1.7 and 3.2.3 are vulnerable to remote code execution due to using an unsafe evaluation context with user-provided queries. By crafting a request to the application and setting the spring.cloud.function.routing-expression header, an unauthenticated attack...
PT-2022-2029
Name of the Vulnerable Software and Affected Versions Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions Description The issue is related to a remote code execution vulnerability in Spring Cloud Function when using routing functionality. It is possible for a user to provid...
The vulnerability of the Gateway Actuator component in the Spring Cloud Gateway API gateway library allows a attacker to execute arbitrary code.
The vulnerability of the Gateway Actuator component in the Spring Cloud Gateway API gateway library is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 poc for CVE-2022-22947...
SPEL Expression Injection Vulnerability in Spring Cloud Function
Spring Cloud Function is a functional computing framework based on Spring Boot.Spring Cloud Function is vulnerable to SPEL expression injection, which can be exploited by attackers to perform injection attacks remotely via SPEL expression injection...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
漏洞简介 Spring Cloud Gateway 是 Spring Cloud 的一个全新项目，该项目是基于 Spring 5.0，Spring Boot 2.0 和 Project Reactor 等技术开发的网关，它旨在为微服务架构提供一种简单有效的统一的API路由管理方式。 前段时间springCloud Gateway被爆致命RCE CVE ,cve信息显示当应用程序启用和暴露Spring Cloud Gateway的Gateway Actuator endpoint时，会受到远程代码注入攻击，攻击者发送恶意请求从而可远程执行任意代码。目前受影响的版本如下： 3.1.0 3.0...
Spring Cloud Gateway < 3.0.7 / 3.1.x < 3.1.1 Remote Code Execution
In Spring Cloud Gateway versions prior to 3.1.1 and 3.0.7, applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker can craft a malicious request that could allow arbitrary remote execution on the remote host. N...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
Vulnerability Profile Spring Cloud Gateway is a brand new pro...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
Vulnerability Profile Spring Cloud Gateway is a brand new pro...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 pocsuite -r CVE-2022-22947POCEXP.py -u url --...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947-ex...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947-ex...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947-ex...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 CVE-2022-22947EXP, CVE-2...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 CVE-2022-22947EXP, CVE-2...
VMware Spring Cloud Gateway < 3.0.7, 3.1.x < 3.1.1 RCE Vulnerability - Active Check
VMware Spring Cloud Gateway is prone to a remote code execution RCE vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
VMware Spring Cloud Gateway Detection (HTTP)
HTTP based detection of VMware Spring Cloud Gateway. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...