CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE

CVE-2022-22947 Introduction

Hazard Level: High
POC/EXP Status: Public
CNVD ID: CNNVD-2022-16402
Affected Versions:
  Spring Cloud Gateway 3.1.0
  Spring Cloud Gateway >=3.0.0, <=3.0.6
  Spring Cloud Gateway <3.0.0

Vulnerability Description

Spring Cloud Gateway has a remote code execution vulnerability. This vulnerability occurs in the Actuator endpoint of Spring Cloud Gateway applications, which is susceptible to code injection when enabled, exposed, and unsecured. An attacker can exploit this vulnerability by maliciously creating requests that allow arbitrary remote execution on the remote host.

CVE-2022-22947.py

For convenience, a script has been written to facilitate command execution and reverse shell.

Execute Normal Commands

python3 CVE-2022-22947.py http://localhost:9000