CVE-2022-22963
VT
VMware Tanzu Spring Cloud
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
What it is
When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.