Back to the CVE list
CVE-2022-22947 CISA KEV · Actively exploited

VMware Spring Cloud Gateway Code Injection Vulnerability

CVSS score

—

EPSS probability

%98.3

Risk score

—

Published

4 y ago

OverviewPublic Exploits (11)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
CyberCTF/vulhub-spring-cve-2022-22947
GitHub

Vulhub spring/CVE-2022-22947: Spring Cloud Gateway Actuator Code Injection (CVE-2022-22947), run with Isoloom

Public PoCSource updated: 10.10.2026 10:56:11
G
entr0pie/demo-cve-2022-22947
GitHub

entr0pie/demo-cve-2022-22947

Public PoCSource updated: 20.08.2026 18:57:51
G
Arrnitage/CVE-2022-22947_exp
GitHub

CVE-2022-22947 Exploit script

Public PoCSource updated: 12.08.2026 01:57:03
G
ciri3/spring-cloud-gateway-cve-2022-22947-report
GitHub

Technical report about CVE-2022-22947 in Spring Cloud Gateway and its exploitation through exposed Actuator endpoints.

Public PoCSource updated: 03.06.2026 11:24:35
G
shoucheng3/spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6
GitHub

shoucheng3/spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6

Public PoCSource updated: 20.08.2025 14:02:38
G
skysliently/CVE-2022-22947-pb-ai
GitHub

一个由AI生成的漏洞验证应用

Public PoCSource updated: 08.08.2025 08:43:51
G
cc3305/CVE-2022-22947
GitHub

CVE-2022-22947 exploit script

Public PoCSource updated: 27.07.2024 20:16:38
G
superneilcn/SpringExploitGUI
GitHub

一款Spring综合漏洞的利用工具，工具目前支持Spring Cloud Gateway RCE(CVE-2022-22947)、Spring Framework RCE (CVE-2022-22965) 的检测以及利用

Public PoCSource updated: 07.02.2024 07:51:30
G
Sumitpathania03/CVE-2022-22947
GitHub

Sumitpathania03/CVE-2022-22947

Public PoCSource updated: 26.11.2024 09:43:53
E
Spring Cloud Gateway 3.1.0 - Remote Code Execution (RCE)
Exploit-DB

Spring Cloud Gateway 3.1.0 - Remote Code Execution (RCE)

Exploit referenceSource updated: 07.03.2022 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22947.yaml
Nuclei

Nuclei: Spring Cloud Gateway Code Injection

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-22947"