References https://spring.io/security/cve-2022-22965 https://nvd.nist.gov/vuln/detail/CVE-2022-22965 https://zgao.top/cve-2022-22965-spring-framework-jdk-9-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/ https://developer.aliyun.com/article/1338406 https://stack.chaitin.com/vuldb/detail/60f3b528-6c3b-459d-ab18-601f1274619c https://www.cnblogs.com/qianfu/p/17530893.html https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/framework/Spring-Data-Binding%E4%B8%8EJDK-9+%E5%AF%BC%E8%87%B4%E7%9A%84%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2022-22965.md https://zhuanlan.zhihu.com/p/491123557 https://www.h3c.com/cn/d_202207/1644542_30003_0.htm https://tanzu.vmware.com/security/cve-2022-22965
Related VulnerabilitiesPoCCVE-2026-39352: Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path TraversalPoCfrappe-default-login: Frappe Framework - Default Login CredentialsSpringBlade /api/blade-log/api/list SQL 注入漏洞SpringBlade /api/blade-user/list SQL 注入漏洞Spring Actuator 未授权访问漏洞PoCspringboot-sbom: Spring Boot Actuator SBOM - ExposurePoCCVE-2025-41242: Spring Framework - Path TraversalPoCspringboot-httpexchanges: Detects Springboot HTTP Exchanges ActuatorPoCCVE-2024-38819: Spring Framework Path Traversal in Functional Web FrameworksPentaho /pentaho/j_spring_security_check 默认口令漏洞PoCCVE-2026-22739: Spring Cloud Config Server - Path TraversalPoCspringboot-x-application-context: Spring Boot `X-Application-Context` Header ExposureServerless Framework 未授权 命令注入漏洞