References https://www.cnvd.org.cn/flaw/show/CNVD-2022-34640 https://avd.aliyun.com/detail?id=AVD-2024-22233 https://spring.io/security/cve-2024-22233 https://www.sentinelone.com/vulnerability-database/cve-2023-20863/ https://spring.io/security/cve-2024-38809 https://avd.aliyun.com/detail?id=AVD-2022-22950 https://www.venustech.com.cn/new_type/aqtg/20240123/26919.html https://vuldb.com/zh/vuln/278442 https://www.aqtd.com/nd.jsp?id=5832 https://nvd.nist.gov/vuln/detail/cve-2022-22950
Related VulnerabilitiesVMware ESXi /sdk 默认口令漏洞PoCCVE-2026-39352: Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path TraversalPoCfrappe-default-login: Frappe Framework - Default Login CredentialsSpringBlade /api/blade-log/api/list SQL 注入漏洞SpringBlade /api/blade-user/list SQL 注入漏洞Spring Actuator 未授权访问漏洞PoCspringboot-sbom: Spring Boot Actuator SBOM - ExposurePoCCVE-2025-41242: Spring Framework - Path TraversalPoCspringboot-httpexchanges: Detects Springboot HTTP Exchanges ActuatorPoCCVE-2024-38819: Spring Framework Path Traversal in Functional Web FrameworksPentaho /pentaho/j_spring_security_check 默认口令漏洞PoCCVE-2026-22739: Spring Cloud Config Server - Path TraversalPoCCVE-2022-31678: VMWare Cloud Foundation NSX-V - XML External Entity (XXE)