CVE-2022-22947 1

CVE-2022-22947: VMware Spring Cloud Gateway Code Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog May 16, 2022

Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.

Vulnerabilities & Patching