Description
Apache Ambari 的Metrics Consumers中存在SpringEL 注入缺陷，此漏洞允许恶意的经过身份验证的用户远程执行任意代码
Apache Ambari Metrics Consumers 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://lists.apache.org/thread/302c4hwfjy9lx63jrbhcdx948pxc54l1
https://seclists.org/oss-sec/2023/q3/20
https://avd.aliyun.com/detail?id=AVD-2022-45855
https://www.cve.org/CVERecord?id=CVE-2022-45855
https://nvd.nist.gov/vuln/detail/CVE-2022-45855