spring-cloud-function: Remote code execution by malicious Spring Expression
CVSS Skor
9.8
EPSS İhtimal
%99.9
Risk Skoru
19.6
Yayın
4 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Spring Cloud 3.2.2 - Remote Command Execution (RCE)
Nuclei: Spring Cloud - Remote Code Execution
This is a POC for CVE-2022-22963
spring cloud function 一键利用工具! by charis 博客https://charis3306.top/
Vulhub spring/CVE-2022-22963: Spring Cloud Function SpEL Injection (CVE-2022-22963), run with Isoloom
Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function
Educational proof-of-concept automation for CVE-2022-22963, demonstrated in an authorized Hack The Box lab environment.
İlgili Benzer Açıklar
jenkins: Arbitrary file read vulnerability through the CLI can lead to RCE
activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack
salt: sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection
Vulnerability in N/a
libwebp: Heap buffer overflow in WebP Codec
salt: salt-master process ClearFuncs class does not properly validate method calls
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-22963"