CVE: 2022 22965 | Remote code execution in Spring Cloud Function | DEMO #ChaliyeHackKarteHain❤️

Channel:
India Infosec Gamer
Subscribers:
11,400
Published on ● Video Link: https://www.youtube.com/watch?v=s-WlPps57zg


Duration: 2:41
130 views
5

In Spring Cloud Function versions 3.1.6, 3.2.2, and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Affected VMware Products and Versions: Severity is critical unless otherwise noted.

Spring Cloud Function
3.1.6
3.2.2
Older, unsupported versions are also affected

Mitigation
Users of affected versions should upgrade to 3.1.7, 3.2.3. No other steps are necessary. Releases that have fixed this issue include:

Spring Cloud Function
3.1.7
3.2.3

Credit
This vulnerability was initially discovered and responsibly reported by m09u3r.

References
https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
https://cwe.mitre.org/data/definitions/770.html
https://cwe.mitre.org/data/definitions/497.html

Thanks for watching!
देखने के लिए धन्यवाद
Благодаря за гледането
Kiitos katsomisesta
感谢您观看
Merci d'avoir regardé
Grazie per la visione
Gracias por ver
شكرا للمشاهدة
دیکھنے کے لیے شکریہ

PoC By Jaspreet Singh

Join Infosec Gamer on DISCORD: https://discord.com/invite/nS62Eu7

For Career Advice in Cyber Security: Talk to Me 😊
-------------------------------------------------------------------------------
Instagram► https://www.instagram.com/iamrahultyagi
Facebook ► https://www.facebook.com/infosecgamer/
Twitter ► https://twitter.com/rahultyagihacks

Like and Subscribe
-------------------------------
https://www.youtube.com/infosecgamer?sub_confirmation=1



Other Videos By Infosec Gamer


2022-07-14Digital World Vulnhub CTF Walkthrough | Infosec Gamer #ChaliyeHackKarteHain❤️
2022-07-12NYX 1 Vulnhub CTF Walkthrough | Infosec Gamer #ChaliyeHackKarteHain❤️
2022-07-10Mercury Vulnhub CTF Walkthrough | Infosec Gamer #ChaliyeHackKarteHain❤️
2022-07-08Powergrid 1.0.1 | Vulnhub CTF Walkthrough | Infosec Gamer #ChaliyeHackKarteHain❤️
2022-06-25djinn Vulnhub CTF Walkthrough | Infosec Gamer #ChaliyeHackKarteHain❤️
2022-06-23Sunset Nightfall Vulnhub CTF Walkthrough | Infosec Gamer #ChaliyeHackKarteHain❤️
2022-06-22How a simple iphone charging cable can hack your computer? #ChaliyeHackKarteHain❤️
2022-06-19UnknownDevice64 Vulhub CTF Walkthrough | Infosec Gamer
2022-06-16pWnOS Vulnhub CTF Walkthrough | Infosec Gamer #ChaliyeHackKarteHain❤️
2022-06-08Call of Duty: Modern Warfare II - Gameplay Trailer 2022
2022-05-28CVE: 2022 22965 | Remote code execution in Spring Cloud Function | DEMO #ChaliyeHackKarteHain❤️
2022-05-19Log4j CVE-2021-44228 RCE Exploit DEMO #ChaliyeHackKarteHain❤️
2022-05-17HTTP Protocol Stack Remote Code Execution Exploit Demo | CVE-2022-21907 #ChaliyeHackKarteHain❤️
2022-05-14CALL OF DUTY MODERN WARFARE Hindi Gameplay Mission 2 and 3 | उज़बेकिस्तान में हड़कंप
2022-02-03Call of Duty Modern Warfare Gameplay in Hindi | Mission 1: Fog of War | शुरुआत


Tags:
infosec gamer
rahul tyagi
cve-2021
cve-search
cve-2022 exploit
CVE 2022
cve 2022 poc
cve 2022 spring
exploit demos
hacking exploit
hacking exploits
hacking art of exploitation
cve 2022 dirty pipe
ransomware live
ransomware live attack
ransomware live demonstration
Spring cloud
spring cloud tutorial
spring cloud gateway
hacking spring cloud
cloud hacking videos
metin2 cloud exploit
spring shell vulnerability
spring boot rce
spring rce vulnerability