HenriVlasic / Exploit-for-CVE-2022-22963

An exploit for the CVE-2022-22963 (Spring Cloud Function Vulnerability)

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Exploit-for-CVE-2022-22963

Exploit using curl to get a reverse shell in vulnerable spring cloud environments.

This exploit abuses the functionRouter URI, by injecting code into the eval function of the Spring Framework through a post request with a header that gives us Remote Code Execution (RCE).

Created by

Henri Vlasic

Arthur Valverde

About

An exploit for the CVE-2022-22963 (Spring Cloud Function Vulnerability)


Languages

Language:Shell 100.0%