CVE-2022-22947—VMware Spring Cloud Gateway Code Injection Vulnerability
PUBLISHEDvulnerability record
2022-05-16 · last modified June 21, 2025
Metadata
漏洞名称
VMware Spring Cloud Gateway Code Injection Vulnerability
描述
Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.
已知用于勒索软件活动吗？
采集行动
Apply updates per vendor instructions.