Loading CVE intelligence

CVE-2022-22963

CriticalPublished

VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

Published: Apr 1, 2022
Updated: Oct 21, 2025
Assigning CNA: vmware
Evidence observed: Aug 25, 2022

Primary CVSS

9.8/ 10Critical

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

99.9%

High · next 30 days

Percentile: 100.0%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Sources

32

CVE-2022-22963Exploit
Simple exploit
CVE-2022-22963PoC
POC for CVE-2022-22963
CVE-2022-22963Exploit
spring cloud function 一键利用工具! by charis 博客https://charis3306.top/
CVE-2022-22963

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

PoC

Proof-of-concept exploit for CVE-2022-22963 (Spring4Shell) with a vulnerable Docker container and curl-based remote code execution via Spring Cloud Function routing expressions.

CVE-2022-22963Exploit

Binaries for CVE-2022-22963

CVE-2022-22963_Reverse-Shell-ExploitExploit

CVE-2022-22963 is a vulnerability in the Spring Cloud Function Framework for Java that allows remote code execution. This python script will verify if the vulnerability exists, and if it does, will give you a reverse shell.

CVE-2022-22963Exploit

Proof-of-concept exploit for CVE-2022-22963, a Spring Cloud Function SpEL injection leading to remote code execution. Includes a shell script for automated exploitation with reverse shell payload.

Spring-CVEExploit

This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spring-webflux RCE termed "SpringShell".

CVE-2022-22963Exploit

Python exploit for CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function, enabling arbitrary command execution via the /functionRouter endpoint.

RCE-in-Spring-Cloud-CVE-2022-22963Exploit

Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function

CVE-2022-22963Exploit

Python automation script that reproduces CVE-2022-22963, a critical SpEL injection in Spring Cloud Function, enabling reverse shell in authorized lab environments.

Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCEExploit

Python exploit for CVE-2022-22963 (Spring4Shell) targeting Spring Cloud Function RCE. Automates reverse shell delivery via wget and bash one-liner execution.

CVE-2022-22963Exploit

CVE-2022-22963 Spring-Cloud-Function-SpEL_RCE_exploit

CVE-2022-22963-ExploitExploit

Rust-based exploit for the CVE-2022-22963 vulnerability

SpringExploitGUIExploit

A comprehensive Spring vulnerability exploitation tool. The tool currently supports detection and exploitation of Spring Cloud Gateway RCE (CVE-2022-22947) and Spring Framework RCE (CVE-2022-22965).

cve-2022-22963PoC

Spring Cloud Function SpEL - cve-2022-22963

CVE-2022-22963Exploit

CVE-2022-22963-poc

spring-spel-0day-pocPoC

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963

CVE-2022-22963-POCExploit

Exploit for CVE-2022-22963 (Spring Cloud Function SpEL injection) enabling remote code execution and reverse shell. Includes Docker-based lab for testing and learning the vulnerability.

spring-cloud-function-rceExploit

Spring Cloud Function SPEL表达式注入漏洞（CVE-2022-22963）

CVE-2022-22963-PoCPoC

Minimal proof-of-concept for CVE-2022-22963 remote code execution in Spring Cloud Function via SpEL injection. Demonstrates exploitation with curl and a vulnerable server.

CVE-2022-22963-PoCExploit

CVE-2022-22963 RCE PoC in python

CVE-2022-22963-Poc-BearculesPoC

This is a POC for CVE-2022-22963

CVE-2022-22963PoC

Proof-of-concept exploit for CVE-2022-22963 (Spring Cloud Function SpEL RCE). Scans URLs, executes commands, and identifies vulnerable targets.

CVE-2022-22963PoC

Spring Cloud Function Vulnerable Application / CVE-2022-22963

CVE-2022-22963PoC

Proof-of-concept exploit for CVE-2022-22963 (Spring Cloud Function SpEL injection) with detection script and curl-based RCE payload generation.

SpringCloudFunction-ResearchPoC

CVE-2022-22963 research

Spring0DayCoreExploitExploit

{ Spring Core 0day CVE-2022-22963 }

vulnerability-pocPoC

CVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security testing & research only.

CVE-2022-22963Exploit

CVE to CTF FP

Spring Cloud 3.2.2 - Remote Command Execution (RCE)Exploit

GatoGamer1155 · java · Jul 11, 2023