Description
No description available.
Spring Cloud Gateway SpEL 表达式注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947/blob/main/Spring%20Cloud%20Gateway%20Actuator%20API%20SpEL%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%EF%BC%88CVE-2022-22947%EF%BC%89.md
https://cloud.tencent.com/developer/article/2586456
https://y4er.com/posts/cve-2022-22947-springcloud-gateway-spel-rce-echo-response/
https://peiqi.wgpsec.org/wiki/frame/SpringBoot/Spring%20Cloud%20Gateway%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2022-22947.html
https://www.cnblogs.com/bitterz/p/15964852.html
https://gv7.me/articles/2022/the-spring-cloud-gateway-inject-memshell-through-spel-expressions/
https://www.h3c.com/cn/d_202207/1644533_30003_0.htm
https://spring.io/security/cve-2025-41253
https://zeropath.com/blog/cve-2025-41253-spring-cloud-gateway-spel-exposure
https://blog.z3r.ru/posts/spring-cloud-gateway-spel-vuln/
https://nvd.nist.gov/vuln/detail/CVE-2025-41253