Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-22947 — Reproducible lab environment for CVE-2022-22947, a Spring Cloud Gateway Actuator API remote command execution vulnerability. Includes source code and instructions to compile and test the exploit. | Kitploit
Tools/GitHubGitHub/dbgee/cve-2022-22947
Vulnerability AnalysisExploitationWeb Application ExploitationLearning & EducationLabs & Practice
GitHubdbgee/cve-2022-22947

CVE-2022-22947

Reproducible lab environment for CVE-2022-22947, a Spring Cloud Gateway Actuator API remote command execution vulnerability. Includes source code and instructions to compile and test the exploit.

View Repository
224 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Spring Cloud Gateway RCE Env CVE-2022-22947

CVE-2022-22947 was identified in the Spring Cloud Gateway Server jar. After the application is compiled you should be able to view the existing routes by visiting: http://127.0.0.1:9000/actuator/gateway/routes

Compile

root@kitploit:~
$ mvn package -DskipTests

Run

root@kitploit:~
$ java -jar target/spring-gateway-rce-0.0.1.jar

The application should run be running on port 9000.

Download Tool