Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2022-22947

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2022-22947.

Coverage Span: 2022-03-23
Reports: 1 related reports

Associated Reports & Timeline

CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability

Viettel researchers analyze CVE-2022-22947, a Spring Cloud Gateway 0-day where exposed actuator endpoints permit adding SpEL-filter routes, leading to RCE via EL injection.