CVE-2021-22053
HIGH EXPLOITED IN THE WILD NUCLEISpring Cloud Netflix Hystrix Dashboard - Remote Code Execution via Request URI Path SpringEL Injection
Title source: llmExploitation Summary
CVE-2021-22053 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 2 public exploits from researchers including SecCoder-Security-Lab, Vulnmachines. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains a functional PoC for CVE-2021-22053, demonstrating a SpringEL injection vulnerability in Spring Cloud Netflix Hystrix Dashboard. The exploit leverages path-based template resolution to execute arbitrary code via crafted URI paths.
Description
Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at `/hystrix/monitor;[user-provided data]`, the path elements following `hystrix/monitor` are being evaluated as SpringEL expressions, which can lead to code execution.
Exploits (2)
The repository contains a functional PoC for CVE-2021-22053, demonstrating a SpringEL injection vulnerability in Spring Cloud Netflix Hystrix Dashboard. The exploit leverages path-based template resolution to execute arbitrary code via crafted URI paths.
The repository provides a detailed technical description of CVE-2021-22053, a Spring Cloud Netflix Hystrix Dashboard vulnerability allowing SpringEL injection via URI path manipulation. It includes affected versions, mitigation steps, and references but lacks functional exploit code.
Nuclei Templates (1)
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H