Skip to content

Spring Cloud Gateway Actuator API 远程命令执行 CVE-2022-22947

Notifications You must be signed in to change notification settings

dbgee/CVE-2022-22947

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Spring Cloud Gateway RCE Env CVE-2022-22947

CVE-2022-22947 was identified in the Spring Cloud Gateway Server jar. After the application is compiled you should be able to view the existing routes by visiting: http://127.0.0.1:9000/actuator/gateway/routes

Compile

$ mvn package -DskipTests

Run

$ java -jar target/spring-gateway-rce-0.0.1.jar

The application should run be running on port 9000.

About

Spring Cloud Gateway Actuator API 远程命令执行 CVE-2022-22947

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages