Vmware Spring Framework 逻辑缺陷漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://blog.csdn.net/nnn11/article/details/152599859
• https://avd.aliyun.com/detail?id=AVD-2022-22950
• https://www.fortiguard.com/cn/outbreak-alert/vmware-spring-cloud-function
• https://cve.imfht.com/detail/CVE-2026-40970
• http://www.xwood.net/_site_domain_/_root/5870/5874/t_c9001722.html
• https://zhuanlan.zhihu.com/p/5483655619
• https://cloud.tencent.com/developer/article/2532530
• https://juejin.cn/post/7201506099341738041
• https://www.xtcaq.com/nd.jsp?id=8792
• https://www.securecodewarrior.com/zh/article/vulnerabilities-in-spring-libraries-are-you-at-risk
• https://spring.io/security/cve-2024-22233
• https://blogs.vmware.com/security/2022/04/how-to-hunt-for-spring4shell-and-java-spring-vulnerabilities.html
• https://nvd.nist.gov/vuln/detail/cve-2024-22233
• https://www.sentinelone.com/vulnerability-database/cve-2022-22965/
• https://blogs.vmware.com/tanzu/spring-framework-releases-fixes-for-cve-2024-38808-and-cve-2024-38809/

Related Vulnerabilities

• VMware ESXi /sdk 默认口令漏洞
• PoCCVE-2026-39352: Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path Traversal
• PoCfrappe-default-login: Frappe Framework - Default Login Credentials
• SpringBlade /api/blade-log/api/list SQL 注入漏洞
• SpringBlade /api/blade-user/list SQL 注入漏洞
• Spring Actuator 未授权访问漏洞
• PoCspringboot-sbom: Spring Boot Actuator SBOM - Exposure
• PoCCVE-2025-41242: Spring Framework - Path Traversal
• PoCspringboot-httpexchanges: Detects Springboot HTTP Exchanges Actuator
• PoCCVE-2024-38819: Spring Framework Path Traversal in Functional Web Frameworks
• Pentaho /pentaho/j_spring_security_check 默认口令漏洞
• PoCCVE-2026-22739: Spring Cloud Config Server - Path Traversal
• PoCCVE-2022-31678: VMWare Cloud Foundation NSX-V - XML External Entity (XXE)