Spring Cloud Gateway · Sandworm Watch

May 16, 2022high

CVE-2022-22947: VMware Spring Cloud Gateway Code Injection Vulnerability

Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. Required action: Apply updates per vendor instructions.

CVE-2022-22947EPSS 98.3%Spring Cloud GatewayVMware

CISA KEV ↗ · unattributed attribution