All CVE records
CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
CISA KEV listed
Added August 25, 2022 Remediate by September 15, 2022
Description
When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Required action
Apply updates per vendor instructions.
Notes
https://tanzu.vmware.com/security/cve-2022-22963; https://nvd.nist.gov/vuln/detail/CVE-2022-22963
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.