CVE Intelligence

Maven Org.springframework.cloud:spring-cloud-function-context vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Maven Org.springframework.cloud:spring-cloud-function-context: 1 record(s), with affected versions and fixes.

CVE-2022-22963 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-917 Apr 1, 2022
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.