Sitelet https://web.archive.org/web/20220401211024im_/https://github.com/dinosn/CVE-2022-22963
Skip to content
main
Switch branches/tags
1 branch 0 tags
Code

Latest commit

@dinosn
dinosn Update CVE-2022-22963.yaml
5876a78 Mar 30, 2022
Update CVE-2022-22963.yaml
5876a78

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
CVE-2022-22963.yaml
Update CVE-2022-22963.yaml
Mar 30, 2022
README.md
Update README.md
Mar 30, 2022
poc.py
Create poc.py
Mar 30, 2022
CVE-2022-22963 More information at

README.md

CVE-2022-22963

CVE-2022-22963 PoC

Slight modified for English translation and detection of https://github.com/chaosec2021/Spring-cloud-function-SpEL-RCE/blob/main/Spel_RCE_POC.py . By default whoami is executed on the target and a file vulnerable.txt is created with the URLs that are vulnerable.

More information at

https://www.cyberkendra.com/2022/03/rce-0-day-exploit-found-in-spring-cloud.html, https://github.com/spring-cloud/spring-cloud-function/commit/dc5128b80c6c04232a081458f637c81a64fa9b52

About

CVE-2022-22963 PoC

Resources

Readme

Stars

69 stars

Watchers

2 watching

Forks

27 forks

Releases

No releases published

Packages

No packages published

Languages