Description
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a Spring Cloud Function
Spring Cloud Function versions 3.1.6, 3.2.2 and all old and unsupported versionsaffected
References
- https://tanzu.vmware.com/security/cve-2022-22963 ↗
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-scf-rce-DQrHhJxH ↗
- https://www.oracle.com/security-alerts/cpuapr2022.html ↗
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005 ↗
- https://www.oracle.com/security-alerts/cpujul2022.html ↗
- http://packetstormsecurity.com/files/173430/Spring-Cloud-3.2.2-Remote-Command-Execution.html ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22963 ↗