CVE Intelligence

Vulnerabilidades do Maven Org.springframework.cloud:spring-cloud-function-context

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Maven Org.springframework.cloud:spring-cloud-function-context: 1 registro(s), com versões afetadas e correções.

CVE-2022-22963 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-917 01/04/2022
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.