CVE-2022-22947 | In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ … | CVSS 10.0 CRITICAL

Description

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.

Metadata

CVE ID: CVE-2022-22947
State: PUBLISHED
Assigner: vmware
Reserved: 2022-01-10 00:00 UTC
Published: 2022-03-03 00:00 UTC
Last updated: 2025-10-21 23:15 UTC
Primary CWE: CWE-94
CWE-94: Improper Control of Generation of Code ('Code Inject…
Vendor / Product: n/a / Spring Cloud Gateway
Sources: cve.org · NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: ACTIVE
Automatable: yes
Tech. Impact: total

CISA Known Exploited Vulnerability

Vulnerability name: VMware Spring Cloud Gateway Code Injection Vulnerability
Vendor: VMware
Product: Spring Cloud Gateway
Added to KEV: 2022-05-16
Due date: 2022-06-06
Ransomware: Not known

Required action

Apply updates per vendor instructions.

CISA description

Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.

Affected products (1)

Vendor	Product	Platform	Versions
n/a	Spring Cloud Gateway	—	Spring cloud gateway versions 3.1.x prior to 3.1.1+, 3.0.x prior to 3.0.7+ and all old and unsupported versions

Weakness (CWE)

CWE	Source	Description
CWE-94	cna	CWE-94: Improper Control of Generation of Code ('Code Injection')

CVSS scores (1)

Score	Severity	Version	Source	Vector
10.0	CRITICAL	3.1	adp	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References (5)