CVE-2022-22965criticalbajo ataqueCWE-94

CVE-2022-22965: fallo crítico en Spring Framework

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Spring Framework+ Monitorear Spring Framework

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 9.8epss 100%
de la publicación al armael mismo día
Publicada en NVD1 abr
1ª PoC26 mar
metasploit31 mar
CISA KEV+3d
Lo que declaran los fabricantes (VEX)

Declaraciones oficiales de los fabricantes en formato CSAF/VEX: si su producto está afectado, ya corregido o descartado — y por qué. Es afirmación del fabricante, no juicio de Vexday.

Red Hatdocumento VEX ↗
Afectado
4 productos
Red Hat Integration Camel Quarkus 1 · Red Hat JBoss A-MQ 6 · Red Hat JBoss Fuse 6 · Red Hat Virtualization 4
workaround: For those who are not able to upgrade affected Spring classes to the fixed versions, there is a workaround customers can implement for their applications, via setting disallowed fields on the data binder…
Corregido
7 productos
CEQ 2.2.1-1 (CVE-2022-22965) · RHDM 7.12.1 async · RHINT Camel-K 1.6.5 · RHPAM 7.12.1 async · Red Hat AMQ 7.8.6 · y otros 2
corrección ↗
Acción exigida por CISAplazo federal: 2022-04-25

Apply updates per vendor instructions.

En resumen

Una vulnerabilidad en aplicaciones Spring MVC/WebFlux permite a atacantes ejecutar código arbitrario en el servidor a través de vinculación de datos en Java 9+. El riesgo es crítico cuando la aplicación se ejecuta en Tomcat como archivo WAR.

Detalle técnico

CVE-2022-22965 explota vinculación insegura de datos en Spring Framework en entornos JDK 9+, permitiendo ejecución remota de código mediante entrada maliciosa en endpoints Spring MVC/WebFlux. El ataque requiere implementación como WAR en Tomcat; las implementaciones JAR de Spring Boot no se ven afectadas. La explotación exitosa otorga a atacantes capacidad completa de ejecución remota de código sin autenticación.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · Spring Framework
PoCs públicas encontradas — 171
githubgithub.com/BobTheShoplifter/Spring4Shell-POC★ 377githubgithub.com/reznok/Spring4Shell-POC★ 324githubgithub.com/tpt11fb/SpringVulScan★ 154githubgithub.com/TheGejr/SpringShell★ 131githubgithub.com/zangcc/CVE-2022-22965-rexbb★ 102githubgithub.com/alt3kx/CVE-2022-22965★ 101githubgithub.com/SecNN/SpringFramework_CVE-2022-22965_RCE★ 72githubgithub.com/4nth0ny1130/spring4shell_behinder★ 63githubgithub.com/Mr-xn/spring-core-rce★ 50githubgithub.com/FourCoreLabs/spring4shell-exploit-poc★ 44githubgithub.com/colincowie/Safer_PoC_CVE-2022-22965★ 44githubgithub.com/tangxiaofeng7/CVE-2022-22965-Spring-Core-Rce★ 39githubgithub.com/Kirill89/CVE-2022-22965-PoC★ 32githubgithub.com/k3rwin/spring-core-rce★ 28githubgithub.com/liangyueliangyue/spring-core-rce★ 26githubgithub.com/p1ckzi/CVE-2022-22965★ 23githubgithub.com/DDuarte/springshell-rce-poc★ 19githubgithub.com/alt3kx/CVE-2022-22965_PoC★ 17githubgithub.com/Bouquets-ai/CVE-2022-22965-GUItools★ 17githubgithub.com/itsecurityco/CVE-2022-22965★ 16githubgithub.com/wjl110/CVE-2022-22965_Spring_Core_RCE★ 16githubgithub.com/me2nuk/CVE-2022-22965★ 14githubgithub.com/viniciuspereiras/CVE-2022-22965-poc★ 13githubgithub.com/zer0yu/CVE-2022-22965★ 12githubgithub.com/fracturelabs/go-scan-spring★ 12githubgithub.com/gpiechnik2/nmap-spring4shell★ 8githubgithub.com/Wrin9/CVE-2022-22965★ 7githubgithub.com/sunnyvale-it/CVE-2022-22965-PoC★ 7githubgithub.com/GuayoyoCyber/CVE-2022-22965★ 6githubgithub.com/wikiZ/springboot_CVE-2022-22965★ 6githubgithub.com/mariomamo/CVE-2022-22965★ 5githubgithub.com/wshon/spring-framework-rce★ 4githubgithub.com/iloveflag/Fast-CVE-2022-22965★ 4githubgithub.com/nu0l/CVE-2022-22965★ 4githubgithub.com/Loneyers/Spring4Shell★ 4githubgithub.com/khidottrivi/CVE-2022-22965★ 4githubgithub.com/0xrobiul/CVE-2022-22965★ 3githubgithub.com/CalumHutton/CVE-2022-22965-PoC_Payara★ 3githubgithub.com/likewhite/CVE-2022-22965★ 3githubgithub.com/netcode/Spring4shell-CVE-2022-22965-POC★ 3githubgithub.com/BKLockly/CVE-2022-22965★ 3githubgithub.com/fracturelabs/spring4shell_victim★ 2githubgithub.com/D1mang/Spring4Shell-CVE-2022-22965★ 2githubgithub.com/twseptian/cve-2022-22965★ 2githubgithub.com/bL34cHig0/Telstra-Cybersecurity-Virtual-Experience-★ 2githubgithub.com/rwincey/spring4shell-CVE-2022-22965★ 2githubgithub.com/jakabakos/CVE-2022-22965-Spring4Shell★ 2githubgithub.com/datawiza-inc/spring-rec-demo★ 2githubgithub.com/irgoncalves/irule-cve-2022-22965★ 2githubgithub.com/LudovicPatho/CVE-2022-22965_Spring4Shell★ 2githubgithub.com/gokul-ramesh/Spring4Shell-PoC-exploit★ 1githubgithub.com/lcarea/CVE-2022-22965★ 1githubgithub.com/helsecert/CVE-2022-22965★ 1githubgithub.com/salo-404/firewall★ 1githubgithub.com/clemoregan/SSE4-CVE-2022-22965★ 1githubgithub.com/daniel0x00/Invoke-CVE-2022-22965-SafeCheck★ 1githubgithub.com/cxzero/CVE-2022-22965-spring4shell★ 1githubgithub.com/Snip3R69/spring-shell-vuln★ 1githubgithub.com/mylo-2001/GhostStrike★ 1githubgithub.com/c4mx/CVE-2022-22965_PoC★ 1githubgithub.com/Joe1sn/CVE-2022-22965★ 1githubgithub.com/xsxtw/SpringFramework_CVE-2022-22965_RCE★ 0githubgithub.com/snicoll-scratches/spring-boot-cve-2022-22965★ 0githubgithub.com/mebibite/springhound★ 0githubgithub.com/mwojterski/cve-2022-22965★ 0githubgithub.com/0xr1l3s/CVE-2022-22965★ 0githubgithub.com/luoqianlin/CVE-2022-22965★ 0githubgithub.com/t3amj3ff/Spring4ShellPoC★ 0githubgithub.com/fransvanbuul/CVE-2022-22965-susceptibility★ 0githubgithub.com/te5t321/Spring4Shell-CVE-2022-22965.py★ 0githubgithub.com/Omaraitbenhaddi/-Spring4Shell-CVE-2022-22965-★ 0githubgithub.com/Enokiy/spring-RCE-CVE-2022-22965★ 0githubgithub.com/ClemExp/CVE-2022-22965-PoC★ 0githubgithub.com/devengpk/CVE-2022-22965★ 0githubgithub.com/ajith737/Spring4Shell-CVE-2022-22965-POC★ 0githubgithub.com/c33dd/CVE-2022-22965★ 0githubgithub.com/dbgee/Spring4Shell★ 0githubgithub.com/sohamsharma966/Spring4Shell-CVE-2022-22965★ 0githubgithub.com/LucasPDiniz/CVE-2022-22965★ 0githubgithub.com/ESSAFAR/Firewall-Rules★ 0githubgithub.com/Aur3ns/Block-Spring4Shell★ 0githubgithub.com/guigui237/Expoitation-de-la-vuln-rabilit-CVE-2022-22965★ 0githubgithub.com/jashan-lefty/Spring4Shell★ 0githubgithub.com/brunoh6/web-threat-mitigation★ 0githubgithub.com/osungjinwoo/CVE-2022-22965★ 0githubgithub.com/Nosie12/fire-wall-server★ 0githubgithub.com/shoucheng3/spring-projects__spring-framework_CVE-2022-22965_5-2-19-RELEASE★ 0githubgithub.com/NickoPS87/Spring4Shell-Python-Firewall-POC★ 0githubgithub.com/xenosf/CS4239-Spring4Shell-POC★ 0githubgithub.com/nhattanhh/CVE-2022-22965★ 0githubgithub.com/Shakur1314/CVE-2022-22965-Spring4Shell-Security-Operations-Analysis★ 0githubgithub.com/suyash-R-K/dfir-malware-investigation★ 0githubgithub.com/aditidutta696-dev/Spring4Shell-CVE-2022-22965-Exploitation-Attempt★ 0githubgithub.com/0xBlackash/CVE-2022-22965★ 0githubgithub.com/felisha-elmer/Sandbox-Challenge-Spring4Shell-CVE-2022-22965-★ 0githubgithub.com/YUTING-HUANG0/Spring4Shell-CTF★ 0githubgithub.com/march0n/PoC-CVE-2022-22965-Spring4Shell★ 0githubgithub.com/ernestom-commits/jfrog-apptrust-demo★ 0vulncheckvulncheck.com/xdb/a1ab2e7f37bdno verificadovulncheckvulncheck.com/xdb/67a85e98428fno verificadovulncheckvulncheck.com/xdb/cdc0fd2e25dcno verificadovulncheckvulncheck.com/xdb/70c3406bd20ano verificadovulncheckvulncheck.com/xdb/f6cb75332536no verificadovulncheckvulncheck.com/xdb/a41b01fd981cno verificadovulncheckvulncheck.com/xdb/f93eba349cffno verificadovulncheckvulncheck.com/xdb/109600030fe1no verificadovulncheckvulncheck.com/xdb/e0f189d3ca89no verificadovulncheckvulncheck.com/xdb/ae6d2af65507no verificadovulncheckvulncheck.com/xdb/697638d15686no verificadovulncheckvulncheck.com/xdb/b383e52d60ddno verificadovulncheckvulncheck.com/xdb/30bd37a7b9c8no verificadovulncheckvulncheck.com/xdb/32aee2a0b3b4no verificadovulncheckvulncheck.com/xdb/b2f106eac2b1no verificadovulncheckvulncheck.com/xdb/4ae197406cecno verificadovulncheckvulncheck.com/xdb/3532ae2b1db3no verificadovulncheckvulncheck.com/xdb/44a4aa67f46dno verificadovulncheckvulncheck.com/xdb/a2a434dff59dno verificadovulncheckvulncheck.com/xdb/f697d4d9577bno verificadovulncheckvulncheck.com/xdb/16f47f13dfb3no verificadovulncheckvulncheck.com/xdb/e538f647f0f7no verificadovulncheckvulncheck.com/xdb/43e4620d8285no verificadovulncheckvulncheck.com/xdb/2f1e13cd31bbno verificadovulncheckvulncheck.com/xdb/99a67c155fa1no verificadovulncheckvulncheck.com/xdb/598802190749no verificadovulncheckvulncheck.com/xdb/a99dfc9a1fa0no verificadovulncheckvulncheck.com/xdb/a00bd5404625no verificadovulncheckvulncheck.com/xdb/2fa78259b5d9no verificadovulncheckvulncheck.com/xdb/1d2c273a6a58no verificadovulncheckvulncheck.com/xdb/41c3baef6240no verificadovulncheckvulncheck.com/xdb/c5654abe65ddno verificadovulncheckvulncheck.com/xdb/2d17c8128624no verificadovulncheckvulncheck.com/xdb/20accf3817fano verificadovulncheckvulncheck.com/xdb/3f8ffc5be01fno verificadovulncheckvulncheck.com/xdb/b98563f18c75no verificadovulncheckvulncheck.com/xdb/ba950aab55adno verificadovulncheckvulncheck.com/xdb/c982d62ac774no verificadovulncheckvulncheck.com/xdb/7f595932a60cno verificadovulncheckvulncheck.com/xdb/f1130a964b4fno verificadovulncheckvulncheck.com/xdb/94d4cd3e1504no verificadovulncheckvulncheck.com/xdb/01a71759b184no verificadovulncheckvulncheck.com/xdb/ae290b96b916no verificadovulncheckvulncheck.com/xdb/a06a094eaf77no verificadovulncheckvulncheck.com/xdb/5978e9609a96no verificadovulncheckvulncheck.com/xdb/813cebc364f3no verificadovulncheckvulncheck.com/xdb/7c26b11a86f0no verificadovulncheckvulncheck.com/xdb/cb8af208c905no verificadovulncheckvulncheck.com/xdb/079a4eabc6cbno verificadocve_referencepacketstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/6db677f753b7no verificadovulncheckvulncheck.com/xdb/4b35b8084b29no verificadocve_referencepacketstormsecurity.com/files/166713/Spring4Shell-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/9501ad929ddbno verificadovulncheckvulncheck.com/xdb/b965f51e7bdano verificadovulncheckvulncheck.com/xdb/a73d53d733d9no verificadovulncheckvulncheck.com/xdb/138984a6dfcbno verificadovulncheckvulncheck.com/xdb/29679c6bfbb1no verificadovulncheckvulncheck.com/xdb/fabec78da0ffno verificadovulncheckvulncheck.com/xdb/e2354921ce12no verificadovulncheckvulncheck.com/xdb/0e01e1f9bd5ano verificadovulncheckvulncheck.com/xdb/5e9e936704a6no verificadovulncheckvulncheck.com/xdb/dd66e42c90b5no verificadovulncheckvulncheck.com/xdb/c3b4b774db0eno verificadovulncheckvulncheck.com/xdb/0560b073b083no verificadovulncheckvulncheck.com/xdb/6f90b74eefe8no verificadovulncheckvulncheck.com/xdb/8b60ecb426c1no verificadovulncheckvulncheck.com/xdb/16356d1c89dbno verificadovulncheckvulncheck.com/xdb/95e0360c39a0no verificadovulncheckvulncheck.com/xdb/303de791b29cno verificadovulncheckvulncheck.com/xdb/b352d0391cf6no verificadovulncheckvulncheck.com/xdb/30d6ff807f1fno verificadovulncheckvulncheck.com/xdb/a3bc31588469no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.