[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Remote code execution vulnerability in Spring Cloud Function - CVE-2022-22963

ID: oval:org.secpod.oval:def:80062Date: (C)2022-05-16   (M)2023-07-20
Class: VULNERABILITYFamily: windows




The host is installed with Spring Cloud Function through 3.1.6 or 3.2.x through 3.2.2 and is prone to a remote code execution vulnerability. A flaw is present in the application, which fails to properly handle a routing functionality issue. Successful exploitation could allows attackers to provide a specially crafted SpEL as a routing-expression which may result in remote code execution and access to local resources.

Platform:
Microsoft Windows Server 2008
Microsoft Windows 7
Microsoft Windows 8.1
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2016
Microsoft Windows Server 2012 R2
Microsoft Windows Server
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows 10
Microsoft Windows 11
Product:
Spring Cloud Function
Reference:
CVE-2022-22963
CVE    1
CVE-2022-22963

© SecPod Technologies