
Python-based scanner for CVE-2022-22947 (Spring Cloud Gateway RCE) supporting single and batch target scanning with automated exploit detection.
Spring Cloud Gateway Remote Code Execution Vulnerability (CVE-2022-22947) occurs in the Actuator endpoint of Spring Cloud Gateway applications. When enabled, publicly exposed, and insecure, it is susceptible to code injection. Attackers can exploit this vulnerability to maliciously create requests that allow arbitrary remote execution on the remote host.
Spring Cloud Gateway 3.1.x < 3.1.1
Spring Cloud Gateway < 3.0.7
The main functionality of this script is vulnerability scanning (including single and batch scanning).
The command to scan a single target is as follows:
python CVE-2022-22947.py -u url
Example: Uploading image.png…