CVE-2022-22963
Summary
| CVE | CVE-2022-22963 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-04-01 23:15:00 UTC |
| Updated | 2023-07-13 23:15:00 UTC |
| Description | In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources. |
Risk And Classification
EPSS: 0.944620000 probability, percentile 0.999950000 (date 2026-04-01)
CISA KEV: Listed on 2022-08-25; due 2022-09-15; ransomware use Unknown
Problem Types: CWE-917
CISA Known Exploited Vulnerability
| Vendor | VMware Tanzu |
|---|---|
| Product | Spring Cloud |
| Name | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability |
| Required Action | Apply updates per vendor instructions. |
| Notes | https://tanzu.vmware.com/security/cve-2022-22963; https://nvd.nist.gov/vuln/detail/CVE-2022-22963 |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| CVE-2022-22963: Remote code execution in Spring Cloud Function by malicious Spring Expression | Security | VMware Tanzu | MISC | tanzu.vmware.com | |
| 20220401 Vulnerability in Spring Cloud Function Framework Affecting Cisco Products: March 2022 | CISCO | tools.cisco.com | |
| Oracle Critical Patch Update Advisory - April 2022 | MISC | www.oracle.com | |
| Spring Cloud 3.2.2 Remote Command Execution ≈ Packet Storm | MISC | packetstormsecurity.com | |
| Security Advisory | CONFIRM | psirt.global.sonicwall.com | |
| Oracle Critical Patch Update Advisory - July 2022 | N/A | www.oracle.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
| CISA Known Exploited Vulnerabilities catalog | CISA | www.cisa.gov | kev |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 150494 Spring Cloud Function Remote Code Execution (RCE) Vulnerability (CVE-2022-22963)
- 376508 Spring Cloud Function Remote Code Execution (RCE) Vulnerability (Authenticated)
- 376520 Spring Cloud Function Remote Code Execution (RCE) Vulnerability Scan Utility
- 730417 Palo Alto Networks (PAN-OS) Impact of Spring Vulnerabilities CVE-2022-22963 and CVE-2010-1622 Bypass Vulnerability (PAN-191178)
- 730418 Spring Cloud Function Remote Code Execution (RCE) Vulnerability (Unauthenticated Check)
- 730421 Palo Alto Networks (PAN-OS) Impact of Spring Vulnerabilities CVE-2022-22963 and CVE-2022-22965 Vulnerability (PAN-191178)
- 730428 Palo Alto Networks (PAN-OS) Impact of Spring Vulnerabilities CVE-2022-22963 and CVE-2022-22965 Vulnerability (PAN-191178)
- 730431 Palo Alto Networks (PAN-OS) Impact of Spring Vulnerabilities CVE-2022-22963 and CVE-2022-22965 Vulnerability (PAN-191178)
- 984160 Java (maven) Security Update for org.springframework.cloud:spring-cloud-function-core (GHSA-6v73-fgf6-w5j7)