Loading...
Skip to main content
GeekWala

CVE-2022-22947 — Vulnerability in...

CRITICAL
Actively Exploited

Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured

Published March 4, 2022Updated February 16, 2024Source: osv

What Should I Do?

Patch Immediately

This vulnerability is confirmed under active exploitation (CISA KEV). Patch within 24-48 hours if possible.

Summary

In Spring Cloud Gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed, and unsecured. A remote attacker could make a maliciously crafted request resulting in arbitrary remote execution on the remote host.

Advisory Timeline

  • First published March 4, 2022 (1683 days ago).
  • Last revised February 16, 2024 — 714 days after initial publication.
  • Added to CISA's Known Exploited Vulnerabilities catalog 73 days after publication.

Remediation

Upgrade to the fixed version using your package manager.

Maven
Update org.springframework.cloud:spring-cloud-gateway to 3.1.1 or later
<!-- Update pom.xml dependency version to 3.1.1 for org.springframework.cloud:spring-cloud-gateway -->
Maven
Update org.springframework.cloud:spring-cloud-gateway to 3.0.7 or later
<!-- Update pom.xml dependency version to 3.0.7 for org.springframework.cloud:spring-cloud-gateway -->

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (2)

Affects 1 ecosystem: maven (1).

PackageEcosystemAffectedFixed In
org.springframework.cloud:spring-cloud-gateway
maven
3.1.03.1.1
org.springframework.cloud:spring-cloud-gateway
maven
1.0.0.RELEASE, 1.0.1.RELEASE, 1.0.2.RELEASE, 1.0.3.RELEASE (+29 more)3.0.7

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 10.0 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

Frequently Asked Questions

What is CVE-2022-22947?
Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 10.0/10).
How do I check if my project is affected by CVE-2022-22947?
CVE-2022-22947 affects org.springframework.cloud:spring-cloud-gateway. This vulnerability is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning it is being actively exploited in the wild. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2022-22947 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
10.0

Exploitation is straightforward and causes maximum impact. Patch immediately.

Known Exploited Vulnerability

This vulnerability is in CISA's Known Exploited Vulnerabilities (KEV) catalog, indicating active exploitation in the wild.

Added to KEV catalog: May 16, 2022

Remediation deadline: June 6, 2022

Also Known As

GHSA-3gx9-37ww-9qw6

Related CVEs

More Maven advisories

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies