PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability

blog.viettelcybersecurity.com | vulnerability | CVE-2022-22947 | #cloud | #rce | #zero-day | #java | #vulnerability | #cve-2022-22947 | #spring-cloud-gateway | #el-injection
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Viettel researchers analyze CVE-2022-22947, a Spring Cloud Gateway 0-day where exposed actuator endpoints permit adding SpEL-filter routes, leading to RCE via EL injection.
CVE
CVE-2022-22947
Published
Collected

Related coverage

Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · blog.viettelcybersecurity.com
[CVE-2013-2165] When EL Injection meets Java Deserialization
Exploit development for RichFaces 4 CVE-2018-12532, chaining EL injection into Java deserialization and bypassing library restrictions to achieve reliable RCE on JSF applications.
vulnerability · wiz.io
[CVE-2026-111497] Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
vulnerability · bugpwn.com
open62541: Integer Overflow → Heap Overflow → RCE.
Original research: how a 16 bit size field overflow in open62541's custom DataType machinery lets a malicious OPC UA server corrupt a connecting client's heap, up to remote code execution. CVE-2026-116014, CVSS 9.2. Root cause, networked PoC, and the official fix. By BUG|PWN.
vulnerability · volexity.com
[CVE-2026-85046] Mind the (Patch) Gap , Part 3: Analysis with Volexity Volcano, Threat Intel, and MCP
# Mind the (Patch) Gap , Part 3: Analysis with Volexity Volcano, Threat Intel, and MCP October 16, 2026 Volexity Volcano Team Last month, Volexity published two blog posts in its _Mind the (Patch)...
vulnerability · volexity.com
[CVE-2026-104935] A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days
# A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days October 13, 2026 Charlie Gardner, Sean Koessel, Steven Adair, and Volexity Volcano Team **_Volexity...
Back