CVE-2022-22963
KEVCRITICAL 9.8EPSS 99.9%
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
- Affected
- Spring Cloud Function
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 GitHub
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H - CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 99.94% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2022-08-25
- Nuclei
- critical
- Published
- 2022-04-01
- Updated
- 2025-10-21
Proof-of-concept exploits (38)
- http://packetstormsecurity.com/files/173430/Spring-Cloud-3.2.2-Remote-Command-Execution.h…
- 0x801453/SpringbootGuiExploit20★ · 2024-06-07
- 9xN/SpringCore-0day4★ · 2022-03-31
- AayushmanThapaMagar/CVE-2022-229631★ · 2022-04-01
- BBD-YZZ/GUI-TOOLS25★ · 2024-05-28
- BearClaw96/CVE-2022-22963-Poc-Bearcules0★ · 2023-10-28
- G01d3nW01f/CVE-2022-229630★ · 2023-03-12
- J0ey17/CVE-2022-22963_Reverse-Shell-Exploit24★ · 2023-03-18
- Ki11i0n4ir3/CVE-2022-229630★ · 2023-03-12
- Kirill89/CVE-2022-22963-PoC9★ · 2022-03-30
- MInggongK/SpringbootGuiExploit20★ · 2024-06-07
- Mustafa1986/CVE-2022-229630★ · 2023-03-21
- RanDengShiFu/CVE-2022-2296315★ · 2022-03-30
- SealPaPaPa/SpringCloudFunction-Research1★ · 2022-04-05
- Shayz614/CVE-2022-229630★ · 2024-12-13
- SourM1lk/CVE-2022-22963-Exploit1★ · 2023-04-11
- charis3306/CVE-2022-229638★ · 2023-06-04
- cyberkartik/CVE0★ · 2022-04-12
- darryk10/CVE-2022-2296334★ · 2022-04-15
- dinosn/CVE-2022-22963117★ · 2022-03-30
- dotnes/spring4shell1★ · 2022-04-04
- gunzf0x/CVE-2022-229630★ · 2023-05-04
- hktalent/spring-spel-0day-poc354★ · 2023-03-05
- iliass-dahman/CVE-2022-22963-POC4★ · 2023-01-22
- jojosec/SPeL-injection-study0★ · 2022-04-23
- jrbH4CK/CVE-2022-229630★ · 2024-07-30
- lemmyz4n3771/CVE-2022-22963-PoC4★ · 2023-03-14
- me2nuk/CVE-2022-2296319★ · 2022-04-01
- nikn0laty/RCE-in-Spring-Cloud-CVE-2022-229630★ · 2023-05-26
- puckiestyle/CVE-2022-229631★ · 2022-03-31
- randallbanner/Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE4★ · 2023-04-17
- sinjap/spring4shell1★ · 2022-04-04
- twseptian/cve-2022-229632★ · 2022-04-03
- 808rsec/CVE-2022-229630★ · 2026-05-05
- r4y-br/CVE-2022-229630★ · 2026-08-22
- xmqaq/CVE-2022-229631★ · 2026-06-29
- Fhwang0926/seo-labs0★ · 2026-08-06
- onewinner/VulToolsKit663★ · 2024-09-03
Nuclei templates (1)
Metasploit modules (1)
ExploitDB entries (1)
Vulhub environments (1)
Exploit collections (1)
- CVE-2022-22963.yamlzan8in/afrog
Security advisories
- https://tanzu.vmware.com/security/cve-2022-22963
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-sprin…
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- advisories/GHSA-6v73-fgf6-w5j7