Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-22263. PoCs published by securelayer7.
AI-analyzed exploit summary This repository contains a scanner for CVE-2024-22263, which targets Spring Cloud Dataflow's arbitrary file writing vulnerability. The tool checks for vulnerability by uploading a crafted package and analyzing the server's response.
Description
Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user who has access to skipper server api can use a crafted upload request to write arbitrary file to any location on file system, may even compromises the server.
Exploits (1)
This repository contains a scanner for CVE-2024-22263, which targets Spring Cloud Dataflow's arbitrary file writing vulnerability. The tool checks for vulnerability by uploading a crafted package and analyzing the server's response.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H